CVE-2016-8377

2017-02-1321:00:00

icscert

www.cve.org

8.2 High

AI Score

Confidence

High

0.062 Low

EPSS

Percentile

93.6%

JSON

An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.

CNA Affected

[
  {
    "product": "Fatek Automation PLC WinProladder 3.11 Build 14701",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fatek Automation PLC WinProladder 3.11 Build 14701"
      }
    ]
  }
]