Siemens LOGO! 8 BM (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: LOGO! 8 BM Vulnerabilities: Missing Authentication for Critical Function, Improper Handling of Extra Values, Plaintext Storage of a Password 2. UPDATE INFORMATION This updated...

Stack Overflow Vulnerability in AH-PClink

AH-PClink is a human-machine interface software. AH-PClink suffers from a stack overflow vulnerability in the handling of hmp project files, which allows an attacker to trick a user with AH-PClink installed to open a malicious hmp file, execute malicious code on the user's system, gain control of...

Stack Overflow Vulnerability in Turing Open Matter Configuration Software Studio.exe Handling SPJ Files

Beijing Turing Kaiwu Technology Co., Ltd. is a company that deals with technology development; computer system services; data processing; basic software services; application software services and other items. A stack overflow vulnerability exists in the SPJ file handled by Studio.exe of Turing's...

Memory Corruption Vulnerability in Display Control Remote HMI

Remote HMI is a configuration software produced by Shenzhen Xianzhu Technology Co. A memory corruption vulnerability exists in the handling of smc project files in Remote HMI, which can be exploited by attackers to gain control of the user's system or crash the program...

Memory Corruption Vulnerability in SAMSoar Developer

SAMSoar Developer is a configuration software produced by Shenzhen Xianzhong Technology Co. SAMSoar Developer has a memory corruption vulnerability in the processing of ssp project files, which can be exploited by attackers to gain control of the user's system or crash the program...

Memory Corruption Vulnerability in SKWorkshop

SKWorkshop is a configuration software produced by Shenzhen Xianzhong Technology Co. SKWorkshop suffers from a memory corruption vulnerability when processing shm project files, which can be exploited by attackers to gain control of a user's system or crash the program...

Memory Corruption Vulnerability in KGL_WIN

KGLWIN is a PLC programming software. A memory corruption vulnerability exists in KGLWIN's handling of kpr project files, which can be exploited by an attacker to gain control of a user's system or crash the program...

Memory Corruption Vulnerability in InotouchEditor

InotouchEditor is an HMI programming software produced by Shenzhen Huichuan Technology Co. InotouchEditor suffers from a memory corruption vulnerability when handling afs project files, which can be exploited by an attacker to gain control of the user's system or crash the program...

Design/Logic Flaw

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

CVE-2019-10947

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple stack-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. This may occur because CNCSoft lacks...

CVE-2019-10951

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple heap-based buffer overflow vulnerabilities may be exploited by processing specially crafted project files, allowing an attacker to remotely execute arbitrary code. There is a lack of user input validatio...

CVE-2019-10949

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.88 and prior. Multiple out-of-bounds read vulnerabilities may be exploited, allowing information disclosure due to a lack of user input validation for processing specially crafted project files...

CVE-2018-18994

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an out of bounds read when opening a specially crafted project file, which may cause a system crash or allow data exfiltration...

CVE-2019-6547

Delta Industrial Automation CNCSoft, CNCSoft ScreenEditor Version 1.00.84 and prior. An out-of-bounds read vulnerability may cause the software to crash due to lacking user input validation for processing project files...

PT-2019-18159 · Delta Industrial Automation · Cncsoft Screeneditor

Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation CNCSoft ScreenEditor versions 1.00.84 and prior Description: An out-of-bounds read issue may cause the software to crash due to lacking user input validation for processing project files. This occurs when the...

Schneider Electric Zelio Soft Resource Management Error Vulnerability

Schneider Electric Zelio Soft is a set of logic controller programming software from the French company Schneider Electric Schneider Electric. A resource management error vulnerability exists in Schneider Electric Zelio Soft. The vulnerability can be exploited to execute code via specially crafte...

CVE-2018-19018

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

CVE-2018-19018

An access of uninitialized pointer vulnerability in CX-Supervisor Versions 3.42 and prior could lead to type confusion when processing project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

CVE-2018-19020

CX-Supervisor (Omron) is affected by CVE-2018-19020: in versions 3.42 and prior, processing project files with a tampered offset allows an out-of-bounds read (information disclosure). The root cause is reading beyond an array due to offset manipulation during file parsing. Impact is information d...