Circutor SGE-PLC1000
Approved changes feed: RSS · Atom
cpe:2.3:h:circutor:sge-plc1000:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Circutor (ca159144-045f-5d8f-ae81-c71b6d00748f) |
|---|---|
| Product | Sge Plc1000 (cd7be82f-af50-5477-8dd8-28e425c93024) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11789 |
not_vulnerable | 2026-06-08 07:04:28.937013 |
Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi()' and then uses it as an index in the 'FilesDownload' array with '(&FilesDownload)[iVar2]'. If the parameter is too large, it will access memory beyond the limits.
Published: 2025-12-02T13:04:38.363Z
Updated: 2025-12-02T13:27:16.494Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11788 |
not_vulnerable | 2026-06-08 07:04:28.936300 |
Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Heap-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowSupervisorParameters()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.
Published: 2025-12-02T13:03:32.925Z
Updated: 2025-12-02T13:31:08.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11787 |
not_vulnerable | 2026-06-08 07:04:28.935551 |
Command injection vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.
Published: 2025-12-02T13:02:40.055Z
Updated: 2025-12-02T13:31:49.784Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11786 |
not_vulnerable | 2026-06-08 07:04:28.935095 |
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'SetUserPassword()' function, the 'newPassword' parameter is directly embedded in a shell command string using 'sprintf()' without any sanitisation or validation, and then executed using 'system()'. This allows an attacker to inject arbitrary shell commands that will be executed with the same privileges as the application.
Published: 2025-12-02T13:01:37.231Z
Updated: 2025-12-02T13:36:41.564Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11785 |
not_vulnerable | 2026-06-08 07:04:28.934306 |
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50
Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. In the 'ShowMeterPasswords()' function, there is an unlimited user input that is copied to a fixed-size buffer via 'sprintf()'. The 'GetParameter(meter)' function retrieves the user input, which is directly incorporated into a buffer without size validation. An attacker can provide an excessively large input for the 'meter' parameter.
Published: 2025-12-02T13:01:25.600Z
Updated: 2025-12-02T13:37:33.371Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11784 |
not_vulnerable | 2026-06-08 07:04:28.933550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11783 |
not_vulnerable | 2026-06-08 07:04:28.932914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11782 |
not_vulnerable | 2026-06-08 07:04:28.932077 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11781 |
not_vulnerable | 2026-06-08 07:04:28.931506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11780 |
not_vulnerable | 2026-06-08 07:04:28.930940 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11779 |
not_vulnerable | 2026-06-08 07:04:28.929111 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11778 |
not_vulnerable | 2026-06-08 07:04:28.924510 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33842 |
not_vulnerable | 2026-06-08 05:32:12.539275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33841 |
not_vulnerable | 2026-06-08 05:32:12.538779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.