PT-2014-2638
CVE-2013-2827
·
تاريخ النشر
2014-01-15
·
تاريخ التحديث
2014-02-05
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
WellinTech KingSCADA versions prior to 3.1.2
WellinTech KingAlarm&Event versions prior to 3.1
WellinTech KingGraphic versions prior to 3.1.2
Description
The issue allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the
ProjectURL property value. This is due to an unspecified ActiveX control in the affected software.Recommendations
For WellinTech KingSCADA versions prior to 3.1.2, update to version 3.1.2 or later.
For WellinTech KingAlarm&Event versions prior to 3.1, update to version 3.1 or later.
For WellinTech KingGraphic versions prior to 3.1.2, update to version 3.1.2 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾