Lucene search
+L

168 matches found

Cvelist
Cvelist
added 2021/10/18 12:38 p.m.28 views

CVE-2021-38430 FATEK Automation WinProladder

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code...

7.8CVSS8.1AI score0.00973EPSS
Exploits0References1
CVE
CVE
added 2021/10/18 12:38 p.m.62 views

CVE-2021-38430

CVE-2021-38430 affects FATEK Automation WinProladder, version 3.30 and prior. The root cause is improper validation of user-supplied data when parsing project files (PDW), enabling a stack-based buffer overflow. Exploitation could lead to arbitrary code execution. The ZDI advisory notes this can ...

7.8CVSS7.9AI score0.00973EPSS
Exploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.23 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.21 views

Fatek Automation WinProladder PDW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.35 views

Fatek Automation WinProladder PDW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.18 views

Fatek Automation WinProladder PDW File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.9AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.23 views

Fatek Automation WinProladder PLC Configuration Data Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must access a compromised device or a device on a compromised network. The specific flaw...

8.8CVSS6.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.30 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.1AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.29 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.24 views

Fatek Automation WinProladder PDW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.25 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.33 views

Fatek Automation WinProladder PDW File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.2AI score0.00959EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.20 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00912EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.30 views

Fatek Automation WinProladder PDW File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.4AI score0.00973EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/10/14 12:0 a.m.30 views

Fatek Automation WinProladder PDW File Parsing Unexpected Sign Extension Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS4.7AI score0.00912EPSS
Exploits0References1
CNVD
CNVD
added 2021/10/08 12:0 a.m.43 views

FATEK Automation WinProladder Buffer Overflow Vulnerability (CNVD-2021-83604)

FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code...

6.8CVSS6.6AI score0.00973EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/10/08 12:0 a.m.19 views

FATEK Automation WinProladder Out-of-Bounds Writing Vulnerability (CNVD-2021-83606)

FATEK Automation WinProladder is a PLC from FATEK Automation in China.An out-of-bounds write vulnerability exists in FATEK Automation WinProladder, which can be exploited by attackers to execute arbitrary code...

6.8CVSS6AI score0.00912EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/10/08 12:0 a.m.54 views

FATEK Automation WinProladder Buffer Overflow Vulnerability (CNVD-2021-83602)

FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code in the context of the current process...

6.8CVSS6.5AI score0.00912EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/10/08 12:0 a.m.24 views

FATEK Automation WinProladder Out-of-Bounds Read Vulnerability (CNVD-2021-83601)

FATEK Automation WinProladder is a PLC from FATEK Automation in China.An out-of-bounds read vulnerability exists in FATEK Automation WinProladder, which can be exploited by attackers to read unauthorized information...

4.3CVSS4.2AI score0.00569EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2021/10/08 12:0 a.m.18 views

FATEK Automation WinProladder unexpected flag extension vulnerability

FATEK Automation WinProladder is a PLC from FATEK Automation in China.FATEK Automation WinProladder is vulnerable to an unexpected flag extension vulnerability, which can be exploited by attackers to execute arbitrary code...

6.8CVSS5.4AI score0.00912EPSS
Exploits0Affected Software1
Rows per page
Query Builder