Vulnerabilities > CVE-2022-43663 - Incorrect Conversion between Numeric Types vulnerability in Wellintech Kinghistorian 35.01.00.05

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
wellintech
CWE-681
critical

Summary

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Wellintech
1