Information leakage vulnerability in KingSuperSCADA operation system client of Beijing Asian Control Technology Development Co. Ltd (CNVD-2024-18096)

Ltd. is a high-tech industrial automation and informatization software platform enterprise founded in 1997. An information leakage vulnerability exists in the KingSuperSCADA client, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in the Client of KingSuperSCADA Operation System of Beijing Asian Control Technology Development Co.

Ltd. is a high-tech industrial automation and informatization software platform enterprise founded in 1997. A command execution vulnerability exists in the client side of the KingSuperSCADA operating system of Beijing Asian Control Technology Development Co...

Logic flaw vulnerability in KingPortal development system of Beijing Asian Control Technology Development Co. Ltd (CNVD-2024-17442)

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise founded in 1997 as a software platform for industrial automation and informatization. A logic flaw vulnerability exists in the KingPortal development system of Beijing Asian Control Technology Development Co. Ltd. th...

Information leakage vulnerability in KingPortal development system of Beijing Asian Control Technology Development Co. Ltd (CNVD-2024-16583)

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise founded in 1997 as a software platform for industrial automation and informatization. An information leakage vulnerability exists in the KingPortal development system of Beijing Asia Control Technology Development Co...

Weak Password Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

Ltd. is a high-tech industrial automation and informatization software platform enterprise founded in 1997. A weak password vulnerability exists in KingH5Stream, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in KingSuperSCADA Client of Beijing Asian Control Technology Development Co.

Ltd. is a high-tech industrial automation and informatization software platform enterprise founded in 1997. A SQL injection vulnerability exists in the client side of the KingSuperSCADA operating system of Beijing Asian Control Technology Development Co...

Command Execution Vulnerability in KingSCADA of Beijing Asian Control Technology Development Co.

KingSCADA is a SCADA product for the middle and high-end markets, featuring integrated management, modular development, visualized operation, intelligent diagnosis and control. KingSCADA has a command execution vulnerability that can be exploited by attackers to execute arbitrary commands...

KingView Denial of Service Vulnerability in Beijing Asian Control Technology Development Co.

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in KingView, which can be exploited by attackers to cause the software to crash...

Logic flaw vulnerability in kingh5stream of Beijing Asian Control Technology Development Co. Ltd (CNVD-2023-50681)

KingH5Stream is an excellent live video streaming solution based on HTML5 technology, with low latency, high performance, easy deployment and other advantages. Beijing Asian Control Technology Development Co. kingh5stream There is a logic flaw vulnerability, which can be exploited by attackers to...

Unauthorized access vulnerability in the development center of Beijing Asian Control Technology Development Co. Ltd (CNVD-2023-45548)

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. An unauthorized access vulnerability exists in the Development Center of Beijing Asian Control Technology Development Co. Ltd, which can be exploited by attackers to obtain sensitive...

Information Leakage Vulnerability in KingPortal Development System of Beijing Asia Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. An information leakage vulnerability exists in the KingPortal development system of Beijing Asian Control Technology Development Limited, which can be exploited by attackers to obtain...

Phoenix Contact Classic Line Controllers Insufficient Verification of Data Authenticity (CVE-2022-31800)

An unauthenticated, remote attacker could upload malicious logic to devices based on ProConOS/ProConOS eCLR in order to gain full control over the device. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...

Denial of Service Vulnerability in Configuration King (CNVD-2022-83556)

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...

Denial of Service Vulnerability in Configuration King (CNVD-2022-78794)

Configuration King is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in Configuration King, which can be exploited by an attacker to cause a process crash...

Siemens SIMATIC eaSie Input Validation Error Vulnerability

SIMATIC eaSie, the digital assistant for automation and process control technology in the Siemens Automation Concept "Total Integrated Automation", is vulnerable to an input validation error that could be exploited by remote attackers to trigger a denial of service on the affected system...

Phoenix Contact Classic Line Industrial Controllers

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Phoenix Contact Equipment: ILC 131 ETH, ILC 131 ETH/XC, ILC 151 ETH, ILC 151 ETH/XC, ILC 171 ETH 2TX, ILC 191 ETH 2TX, ILC 191 ME/AN, and AXC 1050 Vulnerability: Missing Authentication for Critical...

ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure

Exploit Title: ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure Exploit Author: LiquidWorm Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062...

ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting (XSS)

Exploit Title: ICT Protege GX/WX 2.08 - Stored Cross-Site Scripting XSS Exploit Author: LiquidWorm Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App:...

ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure Vulnerability

Exploit Title: ICT Protege GX/WX 2.08 - Client-Side SHA1 Password Hash Disclosure Exploit Author: LiquidWorm Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062...

ICT Protege GX/WX 2.08 Cross Site Scripting

ICT Protege GX/WX 2.08 Authenticated Stored XSS Vulnerability Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App: 02.08.766 Lib: 04.00.169 Int: 02.2.208...