{"uuid": "77e5294f-fa47-4846-bd6e-15399e7d2c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-2827", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/wellintech_kingscada_kxclientdownload.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Andrea Micalizzi\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module abuses the kxClientDownload.ocx ActiveX control distributed with WellingTech KingScada.\\n          The ProjectURL property can be abused to download and load arbitrary DLLs from\\n          arbitrary locations, leading to arbitrary code execution, because of a dangerous\\n          usage of LoadLibrary. Due to the nature of the vulnerability, this module will work\\n          only when Protected Mode is not present or not enabled.\", \"disclosure_date\": \"2014-01-14\", \"fullname\": \"exploit/windows/browser/wellintech_kingscada_kxclientdownload\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"KingScada kxClientDownload.ocx ActiveX Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/wellintech_kingscada_kxclientdownload.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/browser/wellintech_kingscada_kxclientdownload\", \"references\": [\"CVE-2013-2827\", \"OSVDB-102135\", \"BID-64941\", \"ZDI-14-011\", \"URL-http://ics-cert.us-cert.gov/advisories/ICSA-13-344-01\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:16.523811Z"}