CVE-2018-20410

WellinTech KingSCADA before 3.7.0.0.1 is affected by a stack-based buffer overflow in the AlarmServer (AEserver.exe) service. The vulnerability is triggered by sending a specially crafted packet to the AlarmServer over TCP port 12401. Affected component/version: KingSCADA prior to 3.7.0.0.1. Root...

WellinTech KingScada AEserver.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of WellinTech KingScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the protocol parsing code contained in kxNetDispose.dll. The parent service is...