Vulnerabilities > Wellintech > High

DATE CVE VULNERABILITY TITLE RISK
2023-03-20 CVE-2022-45124 Improper Authentication vulnerability in Wellintech Kinghistorian 35.01.00.05
An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05.
network
low complexity
wellintech CWE-287
7.5
2014-01-15 CVE-2013-2827 Code Injection vulnerability in Wellintech Kingalarm&Event, Kinggraphic and Kingscada
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 allows remote attackers to download arbitrary DLL code onto a client machine and execute this code via the ProjectURL property value.
network
low complexity
wellintech CWE-94
7.5
2012-05-09 CVE-2012-1977 Credentials Management vulnerability in Wellintech Kingview 3.0
WellinTech KingSCADA 3.0 uses a cleartext base64 format for storage of passwords in user.db, which allows context-dependent attackers to obtain sensitive information by reading this file.
7.1