WellinTech KingView Multiple Vulnerabilities

An attacker who exploits these vulnerabilities could execute arbitrary code on KingView and KingHistorian systems, potentially allowing them to manipulate process data, alter operator displays, or disrupt SCADA visualization and logging functions critical to plant operations.

WellinTech KingView and KingHistorian users should care—these products are commonly deployed as HMI/SCADA visualization and data logging systems in water utilities, electric utilities, and other critical infrastructure. Any organization running KingView 6.53 or KingHistorian 3.0 is at risk.

An attacker could send specially crafted input to trigger a buffer overflow or out-of-bounds memory access in KingView or KingHistorian, causing the application to execute arbitrary code with the privileges of the running service. The attack vector depends on how the application receives input (network protocol, file import, or local interaction).