high7.5Public exploit code
CVE-2013-2827
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to downlo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KingScada - kxClientDownload.ocx ActiveX Remote Code Execution (Metasploit)2014-02-11 · remote · windows · Verified
Impact
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wellintech | Kingalarm\&Event | through 2.0.2 |
| Wellintech | Kinggraphic | through 3.1 |
| Wellintech | Kingscada | through 3.1 |