CVE-2022-43663

Summary: CVE-2022-43663 is an integer conversion vulnerability in WellinTech KingHistorian 35.01.00.05, affecting the RecvPacket function of SORBAx64.dll and capable of causing a buffer overflow via a specially crafted network packet. Cisco Talos details the underlying issue in the RecvPacket han...

CVE-2022-45124

CVE-2022-45124 affects WellinTech KingHistorian 35.01.00.05. Cisco Talos reports an information-disclosure vulnerability in the User authentication path: if an attacker captures an authentication packet, they can recover the username and password, exposing sensitive data. CVSSv3.1 base score 7.5 ...

CVE-2012-2559

CVE-2012-2559 affects WellinTech KingHistorian 3.0. A crafted TCP packet to port 5678 can trigger an invalid pointer write, enabling arbitrary code execution or DoS. Connected sources note patches for KingHistorian are available via WellinTech advisories (ICS-CERT ICSA-12-185-01) and product patc...