Lucene search
+L

85 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/01 12:00 a.m.•6 views

CVE-2020-25181: Heap-based Buffer Overflow

WECON PLC Editor Versions 1.3.8 and prior has a heap-based buffer overflow vulnerabilities have been identified that may allow arbitrary code execution...

8.8CVSS6.5AI score0.02058EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•50 views

WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.02058EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•52 views

WECON PLC Editor WCP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.02058EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/11/10 12:00 a.m.•42 views

WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of WC...

7.8CVSS5.6AI score0.01825EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•2 views

PT-2020-15999

Name of the Vulnerable Software and Affected Versions WECON PLC Editor versions 1.3.8 and prior Description A heap-based buffer overflow issue has been identified that may allow arbitrary code execution. Recommendations For versions 1.3.8 and prior, at the moment, there is no information about a...

8.8CVSS0.02058EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•2 views

PT-2020-15998

Name of the Vulnerable Software and Affected Versions WECON PLC Editor versions 1.3.8 and prior Description A stack-based buffer overflow issue has been identified that may allow arbitrary code execution. Recommendations For WECON PLC Editor versions 1.3.8 and prior, at the moment, there is no...

8.8CVSS0.01825EPSS
SaveExploits0References6
ICS
ICS
•added 2020/11/05 12:00 a.m.•61 views

WECON PLC Editor

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: WECON Equipment: PLC Editor Vulnerabilities: Stack-based Buffer Overflow, Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to execute code under the...

8.8CVSS9.4AI score0.02058EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/01/08 12:00 a.m.•11 views

Buffer Overflow Vulnerability in WECON PLC Editor

WECON PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON PLC Editor, which can be exploited by an attacker to cause a denial of service or code execution with the privileges of the application...

7.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2019/12/30 12:00 a.m.•25 views

(0Day) WECON PLC Editor PLCDataCeter Port Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of W...

7.8CVSS3.6AI score0.02791EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2019/12/30 12:00 a.m.•34 views

(0Day) WECON PLC Editor PLCDataCeter PortPath Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of WECON PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of W...

7.8CVSS3.2AI score0.02791EPSS
SaveExploits0
NVD
NVD
•added 2019/12/23 8:15 p.m.•42 views

CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

7.8CVSS8AI score0.02791EPSS
SaveExploits0References3
Prion
Prion
•added 2019/12/23 8:15 p.m.•21 views

Buffer overflow

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

6.8CVSS8AI score0.02791EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/12/23 7:23 p.m.•40 views

CVE-2019-18236

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

8AI score0.02791EPSS
SaveExploits0References3
CVE
CVE
•added 2019/12/23 7:23 p.m.•67 views

CVE-2019-18236

CVE-2019-18236 affects WECON PLC Editor (Version 1.3.5_20190129). The vulnerability is a stack-based buffer overflow in the PLC Editor when processing project files (notably WCP data elements such as PortPath/Port), caused by handling of fixed-length buffers. Successful exploitation could allow c...

7.8CVSS7.9AI score0.02791EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/23 12:00 a.m.•7 views

CVE-2019-18236: Stack-based Buffer Overflow

Multiple buffer overflow vulnerabilities exist when the PLC Editor Version 1.3.520190129 processes project files. An attacker could use a specially crafted project file to exploit and execute code under the privileges of the application...

7.8CVSS7.7AI score0.02791EPSS
SaveExploits0References3
CNVD
CNVD
•added 2019/12/20 12:00 a.m.•19 views

WECON Technologies PLC Editor Buffer Overflow Vulnerability

WECON Technologies PLC Editor is a programming software for Programmable Logic Controllers PLC from WECON Technologies, China. A buffer overflow vulnerability exists in WECON Technologies PLC Editor. The vulnerability can be exploited to execute code with the privileges of the application via a...

7.8CVSS7.7AI score0.02791EPSS
SaveExploits0References1
Symantec
Symantec
•added 2019/12/19 12:00 a.m.•47 views

Wecon PLC Editor CVE-2019-18236 Multiple Stack Based Buffer Overflow Vulnerabilities

...

3.2AI score0.02791EPSS
SaveExploits0Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2019/12/12 12:00 a.m.•43 views

(0Day) WECON PLC Editor WCP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Wecon PLC Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of W...

7.8CVSS5AI score0.02791EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/12/12 12:00 a.m.•3 views

PT-2019-15293

Name of the Vulnerable Software and Affected Versions WECON PLC Editor version 1.3.5 20190129 Description The issue arises from multiple buffer overflow vulnerabilities when the PLC Editor processes project files. An attacker could exploit this by using a specially crafted project file, potential...

7.8CVSS0.02791EPSS
SaveExploits0References6
NVD
NVD
•added 2019/09/04 3:15 p.m.•35 views

CVE-2019-13522

An attacker could use a specially crafted project file to corrupt the memory and execute code under the privileges of the EZ PLC Editor Versions 1.8.41 and prior...

7.8CVSS7.7AI score0.01367EPSS
SaveExploits0References1
Rows per page
Query Builder