PT-2014-2638 · Wellintech · Kingalarm&Event+2

Andrea Micalizzi · Publicado 2014-01-15 · Atualizado 2014-02-05 · CVE-2013-2827

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WellinTech KingSCADA versions prior to 3.1.2 WellinTech KingAlarm&Event versions prior to 3.1 WellinTech KingGraphic versions prior to 3.1.2

Description The issue allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value. This is due to an unspecified ActiveX control in the affected software.

Recommendations For WellinTech KingSCADA versions prior to 3.1.2, update to version 3.1.2 or later. For WellinTech KingAlarm&Event versions prior to 3.1, update to version 3.1 or later. For WellinTech KingGraphic versions prior to 3.1.2, update to version 3.1.2 or later.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2013-2827

ZDI-14-011

Produtos afetados

Kingalarm&Event

Kinggraphic

Kingscada

Referências · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/wellintech_kingscada_kxclientdownload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/31575 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-14-011 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2013-2827 · Nota de Segurança
• http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01 · Correção