CVE-2022-2866

CVE-2022-2866 affects FATEK Automation FvDesigner up to version 1.5.103. The vulnerability is an out-of-bounds write when processing project files, which could allow arbitrary code execution. Public sources disagree on exploitation details: CVE/NVD describes a local vector requiring user interact...

CVE-2022-2866: Out-of-bounds Write

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution...

The vulnerability of the software for creating FvDesigner operator panels is related to the execution of an operation beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the FvDesigner software for creating operator panels is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially created malicious file...

FATEK FvDesigner 缓冲区错误漏洞

The FATEK FvDesigner is a hardware device from the Chinese company Yonghong Electric FATEK. It provides a human-machine interface. A buffer error vulnerability exists in FATEK FvDesigner 1.5.103 and earlier versions, which stems from vulnerability to out-of-bounds writes and can be exploited by a...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

FATEK Automation FvDesigner

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: FvDesigner Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability may allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The...

PT-2022-4451 · Fatek · Fvdesigner

Name of the Vulnerable Software and Affected Versions: FATEK FvDesigner versions 1.5.103 and prior Description: The issue is related to an out-of-bounds write in memory while processing project files. This can be exploited by an attacker to achieve arbitrary code execution if a valid user is...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-23985 ICSA-22-055-01 FATEK Automation FvDesigner

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution...

FATEK Automation FvDesigner Buffer Overflow Vulnerability (CNVD-2022-21228)

A buffer error vulnerability exists in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, which stems from out-of-bounds writes when processing project files and can be exploited to create a project file that allows arbitrary code execution...

FATEK Automation FvDesigner Buffer Overflow Vulnerability (CNVD-2022-21227)

A buffer error vulnerability in FATEK Automation FvDesigner, a human-computer interaction device from FATEK, stems from the fact that when handling project files, the affected product is vulnerable to out-of-bounds reads, which can be exploited to create a project file that allows arbitrary code...

PT-2022-14924

Name of the Vulnerable Software and Affected Versions Fatek Automation FvDesigner affected versions not specified Description The issue allows an attacker to craft a project file that enables arbitrary code execution due to an out-of-bounds read while processing project files. Recommendations At...