CVE-2022-2866

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution...

CVE-2022-2866

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution...

CVE-2022-2866 FATEK Automation FvDesigner Out-of-bounds Write

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution...

PT-2022-4634 · Measuresoft · Measuresoft Scadapro Server

Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server All Versions Description: The issue is related to the use of unmaintained ActiveX controls in Measuresoft ScadaPro Server, which may lead to two stack-based buffer overflow instances when processing a specific...

Measuresoft ScadaPro Server and Client 缓冲区错误漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. A buffer error vulnerability exists in Measuresoft ScadaPro Server and Client versions pri...

Measuresoft ScadaPro Server and Client 资源管理错误漏洞

Measuresoft ScadaPro Server and Client is a powerful real-time data acquisition software package from Measuresoft Ireland. It provides monitoring, data logging, simulation development and report generation. A resource management error vulnerability exists in Measuresoft ScadaPro Server and Client...

The vulnerability of the backup function for source files of projects in the target programming system, the EcoStruxure Control Expert programmable logic controllers, allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the backup function for source files in the target programming system, the EcoStruxure Control Expert programmable logic controllers, is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code o...

CVE-2022-30275

The Motorola MOSCAD Toolbox software through 2022-05-02 relies on a cleartext password. It utilizes an MDLC driver to communicate with MOSCAD/ACE RTUs for engineering purposes. Access to these communications is protected by a password stored in cleartext in the wmdlcdrv.ini driver configuration...

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

Deserialization of untrusted data

A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all versions up to and including 1.9.4 SP1 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the...

CVE-2022-27580

A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges ...

PT-2022-3926 · Unknown · Alpha7 Pc Loader

Name of the Vulnerable Software and Affected Versions: Alpha7 PC Loader All versions Description: The issue is caused by a stack-based buffer overflow that occurs when processing a specifically crafted project file. This may allow an attacker to execute arbitrary code. The exploitation of this...

Vulnerability in SICK Flexi Soft Designer & Safety Designer

A deserialization vulnerability in a .NET framework class used by both SICK Flexi Soft Designer and SICK Safety Designer allows an attacker to create malicious project files...

CVE-2022-1331

In four instances DMARS All versions prior to v2.1.10.24 does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure...

Delta Electronics ASDA-Soft 缓冲区错误漏洞

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics, a Taiwan, China-based company. A buffer error vulnerability exists in Delta Electronics ASDA-Soft, which can occur due to out-of-bounds writes when the affected product does not properly clear inputs when processing specific...

Delta Electronics ASDA-Soft缓冲区错误漏洞

Delta Electronics ASDA-Soft is an AC servo motor from Delta Electronics, a Taiwan, China-based company. The Delta Electronics ASDA-Soft suffers from a buffer error vulnerability that arises from affected products not properly clearing inputs when processing specific project files, which could...

Delta Electronics DMARS 代码问题漏洞

Delta Electronics DMARS is an Industrial Automation/Embedded Motion Controller from Delta Electronics Taiwan, China. A code issue vulnerability exists in Delta Electronics DMARS that stems from affected products not properly restricting references to XML external entities when processing specific...

Omron CX-Position 缓冲区错误漏洞

Omron CX-Position is a position control software from Omron Japan. It simplifies all aspects of position control, from creating/editing data used in position control units NC units to online communication and monitoring operations. Omron CX-Position suffers from a buffer error vulnerability that...

CVE-2021-44462

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...

CVE-2021-44462

This vulnerability can be exploited by parsing maliciously crafted project files with Horner Automation Cscape EnvisionRV v4.50.3.1 and prior. The issues result from the lack of proper validation of user-supplied data, which can result in reads and writes past the end of allocated data structures...