wellintech kingview vulnerabilities and exploits

(subscribe to this query)

10

CVSSv2

Stack-based buffer overflow in WellinTech KingView 6.53 allows remote malicious users to execute arbitrary code via a crafted packet to TCP port 555.

Wellintech Kingview 6.52 Wellintech Kingview 6.5.30.2010.18018 Wellintech Kingview 3.0 Wellintech Kingview 65.30.2010.18018 Wellintech Kingview Wellintech Kingview 65.30.17249

1 EDB exploit

5

CVSSv2

Directory traversal vulnerability in WellinTech KingView 6.53 allows remote malicious users to read arbitrary files via a crafted HTTP request to port 8001.

Wellintech Kingview 3.0 Wellintech Kingview 65.30.17249 Wellintech Kingview Wellintech Kingview 6.52 Wellintech Kingview 6.5.30.2010.18018 Wellintech Kingview 65.30.2010.18018

10

CVSSv2

WellinTech KingView 6.53 allows remote malicious users to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted packet to (1) TCP or (2) UDP port 2001.

Wellintech Kingview 65.30.2010.18018 Wellintech Kingview Wellintech Kingview 6.52 Wellintech Kingview 6.5.30.2010.18018 Wellintech Kingview 3.0 Wellintech Kingview 65.30.17249

2.1

CVSSv2

WellinTech KingView 6.5.3 and previous versions uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file.

Wellintech Kingview Wellintech Kingview 6.5.30.2010.18018 Wellintech Kingview 65.30.17249 Wellintech Kingview 6.52 Wellintech Kingview 3.0 Wellintech Kingview 65.30.2010.18018

10

CVSSv2

Heap-based buffer overflow in WellinTech KingView 6.53 allows remote malicious users to execute arbitrary code via a crafted packet to TCP port 555.

Wellintech Kingview Wellintech Kingview 6.52 Wellintech Kingview 6.5.30.2010.18018 Wellintech Kingview 3.0 Wellintech Kingview 65.30.2010.18018 Wellintech Kingview 65.30.17249

1 EDB exploit

5.8

CVSSv2

The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx prior to 65.30.30000.10002 in WellinTech KingView prior to 6.53 does not properly restrict ReplaceDBFile method calls, which allows remote malicious users to create or overwrite arbitrary files, and subsequently execute ...

Wellintech Kingview Wellintech Kingview 3.0 Wellintech Kingview 6.52

1 EDB exploit

10

CVSSv2

Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.exe 65.50.2011.18049 in KingView 6.55 allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption...

Wellintech Kingview 6.52 Wellintech Kingview 6.53 Wellintech Kingview 6.55

1 EDB exploit

10

CVSSv2

Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote malicious users to execute arbitrary code via a crafted op-code 3 packet.

Wellintech Kingview 6.53 Wellintech Kingview 65.30.2010.18018

10

CVSSv2

Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote malicious users to execute arbitrary code via a long second argument to the ValidateUser method.

Wellintech Kingview 6.53 Wellintech Kingview 6.52

1 EDB exploit

5.8

CVSSv2

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx prior to 65.30.30000.10002 in WellinTech KingView prior to 6.53 does not properly restrict SaveToFile method calls, which allows remote malicious users to create or overwrite arbitrary files, and subsequently execute arbitr...

Wellintech Kingview

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook