CVE-2013-6128 - CVE House
Back to Database
Status published Medium CVE-2013-6128

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech...

Vulnerability Description

The KCHARTXYLib.KChartXY ActiveX control in KChartXY.ocx before 65.30.30000.10002 in WellinTech KingView before 6.53 does not properly restrict SaveToFile method calls, which allows remote attackers to create or overwrite arbitrary files, and subsequently execute arbitrary programs, via the single pathname argument, as demonstrated by a directory traversal attack.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6128

Credits & Attribution

No credits recorded in the NVD database.

References

More from wellintech

View All →
CVE-2018-20410
WellinTech KingSCADA before 3.7.0.0.1 contains a stack-based buffer overflow. The...
High 7.5
CVE-2013-6127
The SUPERGRIDLib.SuperGrid ActiveX control in SuperGrid.ocx before 65.30.30000.10002 in WellinTech...
Medium 5.8
CVE-2013-2827
An unspecified ActiveX control in WellinTech KingSCADA before 3.1.2, KingAlarm&Event...
High 7.5
CVE-2013-2826
WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before...
Medium 6.4
CVE-2012-4899
WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm,...
Low 2.1

Affected Vendor

Affected Software

kingview
Vulnerable Versions:
0

Timeline

Official Publish: October 25th, 2013
Last Modified: September 16th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.