Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Xinje XD/E Series PLC Program Tool Zip Slip
Vulnerability Description
A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitrary file write privilege when opening a specially-crafted project file. This vulnerability can be triggered by manually opening an infected project file, or by initiating an upload program request from an infected Xinje PLC. This can result in remote code execution, information disclosure and denial of service of the system running the XINJE XD/E Series PLC Program Tool.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
相对路径遍历
Vulnerability Title
XINJE XD/E Series PLC Program Tool 安全漏洞
Vulnerability Description
XINJE XD/E Series PLC Program Tool是中国信捷（XINJE）公司的一种编程软件。 XINJE XD/E Series PLC Program Tool 3.5.1版本及之前版本存在安全漏洞。攻击者利用该漏洞可获得任意文件的写入权限。
CVSS Information
N/A
Vulnerability Type
N/A