CVE-2013-2826: WellinTech KingSCADA before 3.1.2, KingAlarm&Event before 3.1, and KingGraphic before 3.1.2 perform authent...

Security readout for executives and security teams

This flaw affects older WellinTech KingSCADA, KingAlarm&Event, and KingGraphic releases. The software trusted a client-side console for authentication instead of enforcing it server-side, allowing remote bypass of intended restrictions and credential discovery. Business urgency depends on whether these products remain in operational technology environments. Exposure is most likely in industrial control environments still running the named WellinTech products below the fixed version thresholds. The provided metadata lacks CPEs and asset-discovery detail, so inventory confirmation is required. Treat as high priority only where affected WellinTech systems exist. The risk is credential exposure and unauthorized access in operational technology, so prioritize inventory, upgrade planning, network restriction, and credential review. Mitigation focus: Confirm whether affected WellinTech products are deployed in OT or engineering networks.; Check vendor or ICS-CERT guidance for fixed releases and upgrade direction.; Restrict access to the affected service from untrusted networks..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.