critical10.0Public exploit code
CVE-2014-0787
Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KingScada AlarmServer 3.1.2.13 - Remote Stack Buffer Overflow (Metasploit)2017-09-14 · remote · windows
Impact
Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wellintech | Kingscada | through 3.1.2 Version 3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/66709
- http://www.wellintech.com/index.php?option=com_content&view=article&id=56&Itemid=11
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-098-02
- https://www.exploit-db.com/exploits/42724/
- http://ics-cert.us-cert.gov/advisories/ICSA-14-098-02
- http://www.securityfocus.com/bid/66709
- https://www.exploit-db.com/exploits/42724/