CVE-2012-4899

WellinTech KingView 6.5.3 and earlier uses a weak password-hashing algorithm, which makes it easier for local users to discover credentials by reading an unspecified file.

• CWE-310

• http://www.us-cert.gov/control_systems/pdf/ICSA-12-283-02.pdfUS Government Resource
• http://www.wellintech.com/index.php/news/33-patch-for-kingview653Patch, Vendor Advisory
• http://www.us-cert.gov/control_systems/pdf/ICSA-12-283-02.pdfUS Government Resource
• http://www.wellintech.com/index.php/news/33-patch-for-kingview653Patch, Vendor Advisory

Published

Oct 10, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-4893Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-4894Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allow…
• CVE-2012-4895Heap-based buffer overflow in SumatraPDF before 2.1 allows r…
• CVE-2012-4896Heap-based buffer overflow in SumatraPDF before 2.1 allows r…
• CVE-2012-4897Untrusted search path vulnerability in the installer in VMwa…
• CVE-2012-4898Mesh OS before 7.9.1.1 on Tropos wireless mesh routers does …
• CVE-2012-4900Corel WordPerfect Office X6 16.0.0.388 has a DoS Vulnerabili…5.5
• CVE-2012-4901Cross-site scripting (XSS) vulnerability in Template CMS 2.1…
• CVE-2012-4902Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-4903Google Chrome before 18.0.1025308 on Android does not proper…
• CVE-2012-4904Cross-application scripting vulnerability in Google Chrome b…
• CVE-2012-4905Cross-site scripting (XSS) vulnerability in Google Chrome be…