KingScada AlarmServer 3.1.2.13 Buffer Overflow Exploit

This Metasploit module exploits a stack based buffer overflow found in KingScada versions prior to 3.1.2.13. The vulnerability is triggered when sending a specially crafted packet to the 'AlarmServer' AEserver.exe service listening on port 12401. During the parsing of the packet the 3rd dword is...

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit)

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow Metasploit require 'msf/core' class MetasploitModule 'KingScada AlarmServer Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in KingScada 'James Fitts' , 'License' = MSFLICENSE,...

KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit)

require 'msf/core' class MetasploitModule 'KingScada AlarmServer Stack Buffer Overflow', 'Description' = %q This module exploits a stack based buffer overflow found in KingScada 'James Fitts' , 'License' = MSFLICENSE, 'References' = 'CVE', '2014-0787' , 'ZDI', '14-071' , 'URL',...

WellinTech KingSCADA kxNetDispose.dll Stack Buffer Overflow (CVE-2014-0787)

A stack buffer overflow vulnerability has been reported in WellinTech KingSCADA. The vulnerability is due to insufficient validation on the size of the data. A remote unauthenticated attacker could exploit this vulnerability by sending a malicious packet to the KingSCADA server...

CVE-2014-0787

WellinTech KingSCADA CVE-2014-0787 is a stack-based buffer overflow vulnerability affecting KingSCADA before 3.1.2.13. A crafted packet to the AlarmServer service (AEserver.exe) on TCP port 12401 can trigger a stack overflow via an improper size handling in packet parsing, allowing remote code ex...

WellinTech KingSCADA未明远程栈缓冲区溢出漏洞

CVE ID:CVE-2014-0787 WellinTech KingSCADA是一款面向高、中端市场的SCADA产品。 WellinTech KingSCADA存在一个基于栈的缓冲区溢出，允许攻击者向KingSCADA发送特制的报文，可以应用程序上下文执行任意代码。 0 WellinTech KingSCADA 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.wellintech.com/index.php?option=comcontent&view=article&id=56&Itemid=11...