VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 15, 2014· Updated Jun 16, 2026

CVE-2013-2826

CVE-2013-2826

Description

WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authentication on the KAEClientManager console rather than on the server, which allows remote attackers to bypass intended access restrictions and discover credentials via a crafted packet to TCP port 8130.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Wellintech/Kingalarm\&event2 versions
    cpe:2.3:a:wellintech:kingalarm\&event:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wellintech:kingalarm\&event:*:*:*:*:*:*:*:*range: <=2.0.2
    • (no CPE)range: <3.1
  • Wellintech/Kinggraphic2 versions
    cpe:2.3:a:wellintech:kinggraphic:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wellintech:kinggraphic:*:*:*:*:*:*:*:*range: <=3.1
    • (no CPE)range: <3.1.2
  • Wellintech/Kingscada2 versions
    cpe:2.3:a:wellintech:kingscada:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wellintech:kingscada:*:*:*:*:*:*:*:*range: <=3.1
    • (no CPE)range: <3.1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.