Xd/E Series Plc Program Tool
Approved changes feed: RSS · Atom
cpe:2.3:a:xinje:xd/e_series_plc_program_tool:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Xinje (b4ebe252-4aee-57ba-8368-47ca23d06ce0) |
|---|---|
| Product | Xd/E Series Plc Program Tool (79851944-6796-511e-9563-413656f674ac) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34606 |
vulnerable | 2026-06-08 05:32:14.286052 |
XINJE XD/E Series PLC Program Tool DLL Hijacking
HIGH (7.3)
A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, local attacker to load a malicious DLL. Local access is required to successfully exploit this vulnerability. This means the potential attacker must have access to the system and sufficient file-write privileges. If exploited, the attacker could place a malicious DLL file on the system, that when running XINJE XD/E Series PLC Program Tool will allow the attacker to execute arbitrary code with the privileges of another user's account.
Published: 2022-05-11T14:25:21.096Z
Updated: 2024-09-16T17:24:14.853Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34605 |
vulnerable | 2026-06-08 05:32:14.284520 |
Xinje XD/E Series PLC Program Tool Zip Slip
HIGH (7.3)
A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitrary file write privilege when opening a specially-crafted project file. This vulnerability can be triggered by manually opening an infected project file, or by initiating an upload program request from an infected Xinje PLC. This can result in remote code execution, information disclosure and denial of service of the system running the XINJE XD/E Series PLC Program Tool.
Published: 2022-05-11T14:25:19.483Z
Updated: 2024-09-17T01:51:15.399Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.