GCVE - cpe:2.3:a:wellintech:kingscada:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wellintech:kingscada:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wellintech (`d644ec35-4465-5645-8518-951c661d73cc`)
Product	Kingscada (`9b55ea65-92b0-5fcf-9841-174b27be9d97`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-20410`	vulnerable	2026-06-08 05:11:27.214268	Details available WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The vulnerability is triggered when sending a specially crafted packet to the AlarmServer (AEserver.exe) service listening on TCP port 12401. Published: 2018-12-24T02:00:00.000Z Updated: 2024-09-16T16:18:42.221Z Open on db.gcve.eu Reference links https://github.com/flypuma/vul/blob/master/kingview/copy_argumengt_overflow/poc.py https://github.com/flypuma/vul/blob/master/kingview/copy_argumengt_overflow/Debugging.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0787`	vulnerable	2026-06-08 05:05:14.315619	WellinTech KingSCADA Stack-based Buffer Overflow Stack-based buffer overflow in WellinTech KingSCADA before 3.1.2.13 allows remote attackers to execute arbitrary code via a crafted packet. Published: 2014-04-12T01:00:00.000Z Updated: 2025-09-25T17:39:03.344Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-14-098-02 https://www.exploit-db.com/exploits/42724/ http://www.securityfocus.com/bid/66709 http://www.wellintech.com/index.php?option=com_content&view=article&id=56&Itemid=11	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2827`	vulnerable	2026-06-08 05:04:28.084565	Details available An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value. Published: 2014-01-15T16:00:00.000Z Updated: 2024-08-06T15:52:20.033Z Open on db.gcve.eu Reference links http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2826`	vulnerable	2026-06-08 05:04:28.084126	Details available WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130. Published: 2014-01-15T16:00:00.000Z Updated: 2024-08-06T15:52:20.967Z Open on db.gcve.eu Reference links http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1977`	vulnerable	2026-06-08 05:00:52.170012	WellinTech KingSCADA Missing Encryption of Sensitive Data WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file. Published: 2012-05-09T10:00:00.000Z Updated: 2025-06-26T21:30:25.305Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-12-129-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.