Skip to content
OpenAdvisories

Vendor

XINJE

4 known vulnerabilities.

Products

XD/E Series PLC Program Tool 2 XDPPro 1 XD5E-30R-E 1 XD Programing Tool 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2023-5463

    XINJE XDPPro cfgmgr32.dll uncontrolled search path

    A vulnerability was found in XINJE XDPPro up to 3.7.17a. It has been rated as critical. Affected by this issue is some unknown functionality in the library cfgmgr32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locall…

    XINJE XDPPro
  • High 7.3
    CVE-2021-34606

    XINJE XD/E Series PLC Program Tool DLL Hijacking

    A vulnerability exists in XINJE XD/E Series PLC Program Tool in versions up to v3.5.1 that can allow an authenticated, local attacker to load a malicious DLL. Local access is required to successfully exploit this vulnerability. This means the potential attack…

    XINJE XD/E Series PLC Program Tool
  • High 7.3
    CVE-2021-34605

    Xinje XD/E Series PLC Program Tool Zip Slip

    A zip slip vulnerability in XINJE XD/E Series PLC Program Tool up to version v3.5.1 can provide an attacker with arbitrary file write privilege when opening a specially-crafted project file. This vulnerability can be triggered by manually opening an infected …

    XINJE XD/E Series PLC Program Tool