Skip to content
Noroxi

WellinTech records

20 published records for vendor wellintech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 10%
Pre-auth RCE
12
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2012-4711
    58Plan

    Buffer overflow in kingMess.exe 65.20.2003.10300 in WellinTech KingView 6.52, kingMess.exe 65.20.2003.10400 in KingView 6.53, and kingMess.e

    CriticalCVSS 10.0WeaponizedEPSS 61%

    wellintech · kingviewFeb 15, 2013

  • CVE-2011-3142
    52Plan

    Stack-based buffer overflow in an ActiveX control in KVWebSvr.dll in WellinTech KingView 6.52 and 6.53 allows remote attackers to execute ar

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    wellintech · kingviewAug 16, 2011

  • CVE-2011-0406
    46Plan

    Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long reques

    CriticalCVSS 10.0Proof of conceptEPSS 21%

    wellintech · kingviewJan 10, 2011

  • CVE-2012-1831
    45Plan

    Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 55

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    wellintech · kingviewJul 4, 2012

  • CVE-2013-2827
    44Plan

    An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote

    HighCVSS 7.5WeaponizedEPSS 48%

    wellintech · kingalarm\&eventJan 15, 2014

  • CVE-2014-0787
    44Plan

    WellinTech KingSCADA Stack-based Buffer Overflow

    CriticalCVSS 10.0Proof of conceptEPSS 14%

    wellintech · kingscadaApr 12, 2014

  • CVE-2022-43663
    43Plan

    An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05.

    CriticalCVSS 9.8No exploitEPSS 14%

    wellintech · kinghistorianMar 20, 2023

  • CVE-2011-4536
    43Plan

    Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in WellinTech KingView 6.53 and 65.30.2010.18018 all

    CriticalCVSS 10.0No exploitEPSS 9%

    wellintech · kingviewDec 27, 2011

  • CVE-2012-1830
    42Plan

    Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 5

    CriticalCVSS 10.0Proof of conceptEPSS 8%

    wellintech · kingviewJul 4, 2012

  • CVE-2012-1832
    42Plan

    WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted p

    CriticalCVSS 10.0No exploitEPSS 6%

    wellintech · kingviewJul 4, 2012

  • CVE-2012-2559
    41Plan

    WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a cr

    CriticalCVSS 10.0No exploitEPSS 5%

    wellintech · kinghistorianJul 4, 2012

  • CVE-2012-1819
    38Monitor

    Untrusted search path vulnerability in WellinTech KingView 6.53 allows local users to gain privileges via a Trojan horse DLL in the current

    CriticalCVSS 9.3No exploitEPSS 2%

    wellintech · kingviewMay 2, 2012

  • CVE-2022-45124
    34Monitor

    An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05.

    HighCVSS 7.5No exploitEPSS 13%

    wellintech · kinghistorianMar 20, 2023

  • CVE-2018-20410
    30Monitor

    WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow.

    HighCVSS 7.5No exploitEPSS 2%

    wellintech · kingscadaDec 23, 2018

  • CVE-2012-1977
    28Monitor

    WellinTech KingSCADA Missing Encryption of Sensitive Data

    HighCVSS 7.1No exploitEPSS 1%

    wellintech · kingviewMay 9, 2012

  • CVE-2013-6127
    27Monitor

    The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly re

    MediumCVSS 5.8Proof of conceptEPSS 14%

    wellintech · kingviewOct 25, 2013

  • CVE-2013-2826
    26Monitor

    WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager c

    MediumCVSS 6.4No exploitEPSS 2%

    wellintech · kingalarm\&eventJan 15, 2014

  • CVE-2013-6128
    24Monitor

    The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restr

    MediumCVSS 5.8Proof of conceptEPSS 3%

    wellintech · kingviewOct 25, 2013

  • CVE-2012-2560
    21Monitor

    Directory traversal vulnerability in WellinTech KingView 6.53 allows remote attackers to read arbitrary files via a crafted HTTP request to

    MediumCVSS 5.0No exploitEPSS 3%

    wellintech · kingviewJul 4, 2012

  • CVE-2012-4899
    8Monitor

    WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials

    LowCVSS 2.1No exploitEPSS 0%

    wellintech · kingviewOct 10, 2012