CVE:CVE-2013-2827
CNNVD:CNNVD-201401-298
WellinTech KingSCADA、KingAlarm&Event和KingGraphic都是中国亚控（WellinTech）公司的产品。KingSCADA是一套跨平台的SCADA系统软件；KingAlarm&Event是一套数据分析平台；KingGraphic是一套数据展示平台。
WellinTech KingSCADA 3.1及之前的版本，KingAlarm&Event 2.0.2及之前的版本，KingGraphic 3.1及之前的版本中的ActiveX控件存在安全漏洞。远程攻击者可通过设置ProjectURL属性利用该漏洞从远程客户机器上下载任意DLL文件并在目标进程上下文中执行任意代码。
solution:Upgrade wellintech kingalarm&event to a higher version than 2.0.2,and avoid the version (,2.0.2]; Upgrade wellintech kinggraphic to a higher version than 3.1,and avoid the version (,3.1]; Upgrade wellintech kingscada to a higher version than 3.1,and avoid the version (,3.1]