CVE-2012-1831

critical
Published 2012-07-05 · Modified 2026-04-29
CVSS v3
CVSS v2
10.0
VIR risk
10.0

Description

Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cret@cert.org — http://www.wellintech.com/index.php/news/33-patch-for-kingview653

vendor Authored 2026-05-27

Vendor advisory: cret@cert.org — http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf

Application impact

VendorProductVersionsFixed
wellintechkingview{"endIncluding":"6.53"}
wellintechkingview3.0
wellintechkingview6.5.30.2010.18018
wellintechkingview6.52
wellintechkingview65.30.2010.18018
wellintechkingview65.30.17249

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.