Lucene search
+L

167 matches found

Talos Blog
Talos Blog
added 2023/03/21 1:27 p.m.61 views

Vulnerability Spotlight: WellinTech ICS platform vulnerable to information disclosure, buffer overflow vulnerabilities

Carl Hurd of Cisco Talos discovered these vulnerabilities. Cisco Talos recently discovered two vulnerabilities in WellinTechs KingHistorian industrial control systems data manager. KingHistorian is a time-series database that allows users to ingest and process large amounts of data from ICS,...

8.8AI score0.14039EPSS
SaveExploits2
NVD
NVD
added 2023/03/20 9:15 p.m.41 views

CVE-2022-45124

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability...

7.5CVSS7.4AI score0.13446EPSS
SaveExploits1References2
NVD
NVD
added 2023/03/20 9:15 p.m.53 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

9.8CVSS9AI score0.14039EPSS
SaveExploits1References2
OSV
OSV
added 2023/03/20 9:15 p.m.9 views

CVE-2022-45124

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability...

7.5CVSS5.8AI score0.13446EPSS
SaveExploits1References2
Prion
Prion
added 2023/03/20 9:15 p.m.30 views

Information disclosure

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability...

5CVSS7.2AI score0.13446EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/03/20 9:15 p.m.31 views

Design/Logic Flaw

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

7.5CVSS9.4AI score0.14039EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/03/20 8:16 p.m.68 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

8.1CVSS9.7AI score0.14039EPSS
SaveExploits1References1
CVE
CVE
added 2023/03/20 8:16 p.m.80 views

CVE-2022-43663

Summary: CVE-2022-43663 is an integer conversion vulnerability in WellinTech KingHistorian 35.01.00.05, affecting the RecvPacket function of SORBAx64.dll and capable of causing a buffer overflow via a specially crafted network packet. Cisco Talos details the underlying issue in the RecvPacket han...

9.8CVSS9.4AI score0.14039EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/20 8:16 p.m.18 views

CVE-2022-43663

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability...

8.1CVSS6.9AI score0.14039EPSS
SaveExploits1References1
CVE
CVE
added 2023/03/20 8:16 p.m.67 views

CVE-2022-45124

CVE-2022-45124 affects WellinTech KingHistorian 35.01.00.05. Cisco Talos reports an information-disclosure vulnerability in the User authentication path: if an attacker captures an authentication packet, they can recover the username and password, exposing sensitive data. CVSSv3.1 base score 7.5 ...

7.5CVSS7.6AI score0.13446EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/03/20 8:16 p.m.13 views

CVE-2022-45124

An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can sniff network traffic to leverage this vulnerability...

7.5CVSS7.3AI score0.13446EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/03/20 12:00 a.m.11 views

PT-2023-14612 · Wellintech · Kinghistorian

Name of the Vulnerable Software and Affected Versions: WellinTech KingHistorian version 35.01.00.05 Description: An information disclosure issue exists in the User authentication functionality. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can...

7.5CVSS7.7AI score0.13446EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/03/20 12:00 a.m.13 views

WellinTech KingHistorian 代码问题漏洞

WellinTech KingHistorian is a tool for data collection and analysis from WellinTech. A security vulnerability exists in WellinTech KingHistorian version 35.01.00.05, which stems from the presence of an integer conversion vulnerability that could be exploited by an attacker to cause a buffer...

9.8CVSS8.8AI score0.14039EPSS
SaveExploits1References4
Talos
Talos
added 2023/03/20 12:00 a.m.36 views

WellinTech KingHistorian User authentication information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1683 WellinTech KingHistorian User authentication information disclosure vulnerability March 20, 2023 CVE Number CVE-2022-45124 SUMMARY An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian...

7.5CVSS7.2AI score0.13446EPSS
SaveExploits1
Talos
Talos
added 2023/03/20 12:00 a.m.63 views

WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability

Talos Vulnerability Report TALOS-2022-1674 WellinTech KingHistorian SORBAx64.dll RecvPacket integer conversion vulnerability March 20, 2023 CVE Number CVE-2022-43663 SUMMARY An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian...

9.8CVSS7.7AI score0.14039EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/03/20 12:00 a.m.9 views

WellinTech KingHistorian 授权问题漏洞

WellinTech KingHistorian is a tool for data collection and analysis from WellinTech. An authorization issue vulnerability exists in WellinTech KingHistorian version 35.01.00.05. An attacker exploiting this vulnerability could result in the disclosure of sensitive information...

7.5CVSS7.8AI score0.13446EPSS
SaveExploits1References4
Prion
Prion
added 2018/12/24 2:29 a.m.24 views

Stack overflow

WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer AEserver.exe service listening on TCP port 12401...

5CVSS7.6AI score0.01592EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2018/12/24 2:29 a.m.27 views

CVE-2018-20410

WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer AEserver.exe service listening on TCP port 12401...

7.5CVSS7.6AI score0.01592EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2018/12/24 2:00 a.m.33 views

CVE-2018-20410

WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer AEserver.exe service listening on TCP port 12401...

7.6AI score0.01592EPSS
SaveExploits1References2
CVE
CVE
added 2018/12/24 2:00 a.m.66 views

CVE-2018-20410

WellinTech KingSCADA before 3.7.0.0.1 is affected by a stack-based buffer overflow in the AlarmServer (AEserver.exe) service. The vulnerability is triggered by sending a specially crafted packet to the AlarmServer over TCP port 12401. Affected component/version: KingSCADA prior to 3.7.0.0.1. Root...

7.5CVSS7.5AI score0.01592EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder