CVE-2022-43663 Integer overflow in KingHistorian
A remote attacker can trigger a buffer overflow via a crafted packet in WellinTech KingHistorian, potentially leading to code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-43663?
CVE-2022-43663 is a high-severity vulnerability in WellinTech KingHistorian, published on 20 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
Which versions are affected by CVE-2022-43663?
It affects 1 product.
Products include Wellintech Kinghistorian.
How do I fix CVE-2022-43663?
No fix has been published for CVE-2022-43663 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-43663 being exploited?
There is no known exploitation of CVE-2022-43663 in the wild and no public exploit code.
Other vulnerabilities in WellinTech KingHistorian
Sources
Also known as GHSA-488p-w8x3-xh6m.