WellinTech KingSCADA < KAEClientManager Console Remote Authentication Credential Disclosure

Medium Nessus Plugin ID 83917


The WellinTech KingSCADA server installed on the remote host is affected by an authentication credential disclosure vulnerability.


The WellinTech KingSCADA server installed on the remote host is a version prior to It is, therefore, affected by a vulnerability in the KAEClientManager console that allows a remote attacker to authenticate locally on the device rather than on the server, thus bypassing intended access restrictions. The attacker, by sending a crafted packet to TCP port 8130, can then gain access to authentication credential information.


Upgrade KingSCADA to version

See Also


Plugin Details

Severity: Medium

ID: 83917

File Name: scada_kingscada_kaeclientmanager.nbin

Version: $Revision: 1.22 $

Type: local

Family: SCADA

Published: 2015/06/01

Modified: 2018/01/29

Dependencies: 59501

Risk Information

Risk Factor: Medium


Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Information

CPE: cpe:/a:wellintech:kingscada

Required KB Items: SCADA/Apps/WellinTech/KingSCADA/Installed

Patch Publication Date: 2014/01/14

Vulnerability Publication Date: 2014/01/14

Reference Information

CVE: CVE-2013-2826

BID: 64938

OSVDB: 102134

ICSA: 13-344-01