TI-2022-22201 CVE-2022-45124 · GHSA-xm38-cjvm-pwwc
Information disclosure in WellinTech KingHistorian
Priority HIGH 72
An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05.
No WellinTech vulnerabilities are listed in CISA KEV.
3 records in Kinghistorian · all components
An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05.
An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05.
WellinTech KingHistorian 3.0 allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer write) via a crafted packet to TCP port 5678.