← All CVEs

CVE-2022-43663

high · 8.1

An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.

8.1
CVSS
14.0%
EPSS (exploit prob.)
96th
EPSS percentile
2023-03-20
Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-195CWE-681

Affected products

VendorProductAffected versions
wellintechkinghistorian35.01.00.05

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-43663