CVE-2013-2826
published 2014-01-15CVE-2013-2826: WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than…
PriorityP342medium6.4CVSS 2.0
AVNACLAuNCPIPAN
EPSS
1.78%
75.4th percentile
WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| wellintech | kingalarm_event | <= 2.0.2 | — |
| wellintech | kinggraphic | <= 3.1 | — |
| wellintech | kingscada | <= 3.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
WellinTech Vulnerabilities
cisa_ics·2018-09-06
WellinTech Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
WellinTech Vulnerabilities
Last RevisedSeptember 06, 2018
Alert CodeICSA-13-344-01
## OVERVIEW
This advisory was originally posted to the US-CERT secure Portal library on December 10, 2013, and is now being released to the NCCIC/ICS-CERT Web site.
NCCIC/ICS-CERT received reports from the Zero Day Initiative (ZDI) regarding a remote code execution vulnerability and an information disclosure vulnerability in WellinTech KingSCADA, KingAlarm&Event, and KingGraphic applications. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. WellinTech has produc
GHSA
GHSA-7cf4-6qj9-hw7m: WellinTech KingSCADA before 3
ghsa_unreviewed·2022-05-17
CVE-2013-2826 [MEDIUM] GHSA-7cf4-6qj9-hw7m: WellinTech KingSCADA before 3
WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2014-01-15
Published