Arbitrary Code Execution and Denial of Service in WellinTech KingView
CVE-2012-1832

Currently unrated

Key Information:

Vendor
Wellintech
Status
Kingview
Vendor
CVE Published:
5 July 2012

Summary

WellinTech KingView version 6.53 has a vulnerability that enables remote attackers to execute arbitrary code or trigger a denial of service condition. This occurs due to an out-of-bounds read resulting from a specially crafted packet sent to either TCP or UDP port 2001. Organizations using KingView should apply patches to mitigate this security weakness, as it poses significant risks to system integrity.

References

http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01...
x_refsource_MISC
http://www.wellintech.com/index.php/news/33-patch-for-kin...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.