CVE-2012-4711

Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted packet...

CVE-2012-4899

WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file...

CVE-2012-4899

CVE-2012-4899 affects WellinTech KingView 6.5.3 and earlier, where user credentials are not securely hashed, enabling local attackers to discover usernames and passwords by reading a stored file. The vulnerability stems from a weak password-hashing algorithm, and exploitation requires local acces...

CVE-2012-4899

WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file...

WellinTech KingView User Credentials Not Securely Hashed

Overview This advisory is a follow-up to the alert titled ICS-ALERT-12-212-02 WellinTech KingView User Credentials Not Securely Hashed that was published July 30, 2012, on the ICS-CERT Web page. Dr. Wesley McGrew of Mississippi State University has identified a default credential vulnerability in...

WellinTech KingHistorian Detection

Binary data scadaappwellintechkinghistoriandetect.nbin...

CVE-2012-1832

WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted packet to 1 TCP or 2 UDP port 2001...

CVE-2012-2559

WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service invalid pointer write via a crafted packet to TCP port 5678...

CVE-2012-2560

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001...

CVE-2012-1830

Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555...

CVE-2012-1831

Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555...

Stack overflow

Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555...

Heap overflow

Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555...

Code injection

WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service invalid pointer write via a crafted packet to TCP port 5678...

Directory traversal

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001...

Out-of-bounds

WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service out-of-bounds read via a crafted packet to 1 TCP or 2 UDP port 2001...

CVE-2012-2559

WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service invalid pointer write via a crafted packet to TCP port 5678...

CVE-2012-2560

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to port 8001...

CVE-2012-2559

CVE-2012-2559 affects WellinTech KingHistorian 3.0. A crafted TCP packet to port 5678 can trigger an invalid pointer write, enabling arbitrary code execution or DoS. Connected sources note patches for KingHistorian are available via WellinTech advisories (ICS-CERT ICSA-12-185-01) and product patc...

CVE-2012-1831

WellinTech KingView 6.53 (and KingHistorian 3.0 per ICS-CERT) are affected by CVE-2012-1831, a heap-based buffer overflow in KingView that can be triggered by a crafted TCP packet to port 555, enabling remote code execution. The vulnerability is part of multiple KingView vulnerabilities described...