EUVD-2018-19243

Malware in sbrugna...

EUVD-2018-19259

Malware in sbrugna...

FATEK Automation WinProladder 资源管理错误漏洞

FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to resource management errors, which can be exploited by attackers to execute arbitrary code via malformed project files...

Memory Corruption Vulnerability in TAS MH Ethernet Touch Screen Software (CNVD-2020-23755)

Ltd. is a wholly foreign owned enterprise established in China on July 1, 2000 by Antai International Investment Singapore Pte Ltd, a subsidiary of TECO Group, a renowned Taiwanese multinational corporation. A memory corruption vulnerability exists in the MH Ethernet touch screen software of Taia...

Memory Corruption Vulnerability in HollySys PowerPro at Beijing HollySys Automation Drive Technology Co.

Founded in 1993, HOLLIS is an automation and information technology solution provider in China. P Beijing HOLLYSYS Automation Drive Technology Co., Ltd HOLLYSYS PowerPro memory corruption vulnerability can be exploited by attackers to process malformed project files can lead to a program crash, i...

CVE-2018-7530

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and...

CVE-2018-7514

Parsing malformed project files in Omron CX-One versions 4.42 and prior, including the following applications: CX-FLnet versions 1.00 and prior, CX-Protocol versions 1.992 and prior, CX-Programmer versions 9.65 and prior, CX-Server versions 5.0.22 and prior, Network Configurator versions 3.63 and...

Omron CX-One Heap Buffer Overflow Vulnerability (CNVD-2018-07872)

Omron CX-One is an integrated toolkit from Omron Corporation of Japan Omron, which includes software for networking, PTs, inverters, temperature controllers, and PLC programming, etc. CX-FLnet, etc. are applications that are integrated into it. A heap buffer overflow vulnerability exists in vario...

Omron CX-One Code Execution Cave

Omron CX-One is an integrated toolkit from Omron Corporation of Japan Omron, which includes software for networking, PTs, inverters, temperature controllers, and PLC programming, etc. CX-FLnet, etc. are applications that are integrated into it. A security vulnerability exists in several pieces of...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

CVE-2018-7513

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow...

CVE-2018-7519

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

Heap overflow

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow...

CVE-2018-7517

CVE-2018-7517 relates to Omron CX-Supervisor, where parsing malformed SCS project files can trigger an out-of-bounds write in the file parsing code (affecting CX-Supervisor versions 3.30 and prior; ICS update notes 3.40 and prior). The vulnerability potentially enables remote code execution when ...