CVE-2017-9660

Fuji Electric Monitouch V-SFT is affected by CVE-2017-9660 (heap-based buffer overflow) in versions prior to 5.4.43.0. The issue arises in parsing V8 project files and may cause a crash or remote code execution. Exploitation details vary across sources: ZDI describes remote code execution requiri...

Fuji Electric Monitouch V-SFT Project File Parsing Heap Buffer Overflow Vulnerability

Fuji Electric Monitouch V-SFT is an HMI software. A security vulnerability in Fuji Electric Monitouch V-SFT parsing V8 project files allows remote attackers to exploit the vulnerability by submitting a specially crafted file, which can be tricked into being parsed by the user to execute arbitrary...

Fuji Electric Monitouch V-SFT Insecure Configuration Elevation of Privilege Vulnerability

Fuji Electric Monitouch V-SFT is an HMI software. A security vulnerability exists in the configuration of Fuji Electric Monitouch V-SFT, which allows a local attacker to exploit the vulnerability to submit a specially crafted request to execute arbitrary code in the context of the application...

Fuji Electric Monitouch V-SFT Project File Parsing Heap Buffer Overflow Vulnerability (CNVD-2017-22805)

Fuji Electric Monitouch V-SFT is an HMI software. A security vulnerability in Fuji Electric Monitouch V-SFT parsing V8 project files allows remote attackers to exploit the vulnerability by submitting a specially crafted file, which can be tricked into being parsed by the user to execute arbitrary...

Fuji Electric Monitouch V-SFT Project File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Fuji Electric Monitouch V-SFT

CVSS v3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Fuji Electric Equipment: Monitouch V-SFT Vulnerabilities: Stack-Based Buffer Overflow, Heap-Based Buffer Overflow, Improper Privilege Management AFFECTED PRODUCTS The following versions of Monitouch V-SFT, a screen...

Fuji Electric Monitouch V-SFT Insecure Configuration Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate their privileges on vulnerable installations of Fuji Electric Monitouch V-SFT. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

hensel-electric.de XSS vulnerability

Vulnerable URL: https://www.hensel-electric.de/de/suche/index.php?searchTerm=%22%3Eblub%3Csvg%2Fonload%3Dalert%2FOPENBUGBOUNTY%2F%3E=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Schneider Electric Pro-face GP-Pro EX Arbitrary Code Execution Vulnerability

Pro-face GP-Pro EX is the development software for Pro-face GP4000, GP4100, GP4000M, LT4000M, LT3000, EZ Series, SP5000 Smart Portal series products. An arbitrary code execution vulnerability exists in the implementation of Schneider Electric GP Pro EX version 4.07.000, which can be exploited by ...

Mitsubishi Electric Europe B.V. E-Designer Buffer Overflow Vulnerability (CNVD-2017-22836)

E-Designer is an E-Series programming software from Mitsubishi Electric Europe B.V.. A buffer overflow vulnerability exists in Mitsubishi Electric Europe B.V. E-Designer, which can be exploited by an attacker to execute arbitrary code, corrupt data integrity, and cause a denial of service and...

Schneider Electric Pro-face GP-Pro EX

CVSS v3 7.2 ATTENTION: Public exploits are available. Vendor: Schneider Electric Equipment: Pro-face GP-Pro EX Vulnerability: Uncontrolled Search Path Element AFFECTED PRODUCTS The following versions of Pro-face GP-Pro EX software, an HMI management platform, are affected: GP Pro EX version...

Mitsubishi Electric Europe B.V. E-Designer Buffer Overflow Vulnerability

E-Designer is an E-Series programming software from Mitsubishi Electric Europe B.V.. Mitsubishi Electric Europe B.V. E-Designer suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code, corrupt data integrity, and cause a denial of service and...

Mitsubishi Electric Europe B.V. E-Designer Out-of-Bounds Write Vulnerability

E-Designer is an E-Series programming software from Mitsubishi Electric Europe B.V.. The Mitsubishi Electric Europe B.V. E-Designer out-of-bounds write vulnerability can be exploited by a remote attacker to write data to an arbitrary memory location, destroying data integrity and executing...

Schneider Electric Trio TView

CVSS v3 10.0 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Schneider Electric Equipment: Trio TView Vulnerabilities: Multiple Vulnerabilities for Java Runtime Environment AFFECTED PRODUCTS The following versions of Schneider Electric Trio TView...

Mitsubishi Electric E-Designer BES7IsoTcp Driver Configuration ClockDevice Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Mitsubishi Electric E-Designer BECoDeSysARTI Driver Configuration IPAddress0 Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

InduSoft Web Studio Privilege Escalation Vulnerability (Aug 2017) - Windows

InduSoft Web Studio is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mitsubishi Electric Europe B.V. E-Designer

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Mitsubishi Electric Europe B.V. Equipment: E-Designer Vulnerabilities: Heap-Based Buffer Overflow, Stack-Based Buffer Overflow, Out-of-Bounds Write AFFECTED PRODUCTS The following version of E-Designer, a Mitsubishi...

Mitsubishi Electric E-Designer Symbol xSize Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

Mitsubishi Electric E-Designer BEComliSlave Driver Configuration Status_bit Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mitsubishi Electric E-Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...