xArrow SCADA

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: xArrow Equipment: xArrow SCADA Vulnerabilities: Cross-site Scripting, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in remote code execution...

xArrow SCADA 跨站脚本漏洞

xArrow SCADA is an installer for industrial control products from xArrow in China. A cross-site scripting vulnerability exists in xArrow SCADA. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execut...

xArrow <= 3.2 multiple vulnerabilities

Exploit for windows platform in category local exploits ------------- winerr.h ------------- / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004:...

xArrow Multiple Denial of Service Vulnerabilities

xArrow is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2427

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation...

CVE-2012-2428

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

CVE-2012-2426

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

Null pointer dereference

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

Integer overflow

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

Heap overflow

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation...

CVE-2012-2426

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

CVE-2012-2428

CVE-2012-2428 affects xArrow server prior to version 3.4.1. The vulnerability is an integer overflow that enables an out-of-bounds read via a crafted packet, allowing remote code execution. Public sources consistently describe the issue as part of multiple related memory-safety flaws in xArrow (s...

CVE-2012-2427

Heap-based buffer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via packets that trigger an invalid free operation...

CVE-2012-2429

The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2012-2426

The vulnerability CVE-2012-2426 affects xArrow server versions older than 3.4.1, caused by improper memory allocation that can allow remote attackers to trigger a NULL pointer dereference and crash the daemon (DoS). Public sources concur on a DoS impact; no exploits are documented in the provided...

CVE-2012-2429

The CVE-2012-2429 issue concerns the xArrow server prior to version 3.4.1, where an invalid read operation could allow remote attackers to execute arbitrary code via unspecified vectors. The vulnerability is tied to the xArrow memory handling (CWE-119/125/476 families described in the broader adv...

CVE-2012-2427

CVE-2012-2427 affects the xArrow server prior to version 3.4.1. The vulnerability is a heap-based buffer overflow that allows remote attackers to execute arbitrary code by sending crafted packets that trigger an invalid free operation. Public disclosures in multiple feeds corroborate the issue an...

CVE-2012-2428

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

CVE-2012-2426: Undefined Security Weakness

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via unspecified vectors...

CVE-2012-2429: Undefined Security Weakness

The server in xArrow before 3.4.1 performs an invalid read operation, which allows remote attackers to execute arbitrary code via unspecified vectors...