CVE-2021-32931

2021-08-1112:44:46

CWE-824

icscert

www.cve.org

fatek automation

fvdesigner

arbitrary code execution

project files

cve-2021-32931

EPSS

0.002

Percentile

57.6%

JSON

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

CNA Affected

[
  {
    "product": "FATEK Automation FvDesigner",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FvDesigner, Versions 1.5.88 and prior"
      }
    ]
  }
]