Lucene search
+L

201 matches found

ICS
ICS
•added 2021/06/24 12:00 a.m.•80 views

FATEK Automation WinProladder

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write, Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of these...

9.8CVSS10AI score0.01767EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/06/18 12:00 a.m.•5 views

PT-2021-4675

Name of the Vulnerable Software and Affected Versions FATEK Automation WinProladder versions 3.30 and prior Description The issue is related to an out-of-bounds write operation in memory during the syntactic analysis of PDW files. This can be exploited by an attacker to execute arbitrary code or...

7.8CVSS0.0097EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2021/04/21 12:00 a.m.•17 views

The software for programming FATEK WinProladder is vulnerable due to a countable loss of significance, allowing an attacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software arises from a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00982EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2021/04/13 12:00 a.m.•62 views

FATEK Automation WinProladder Integer Overflow Vulnerability

The official version of WinProLadder is a pretty good and useful PLC programming tool. FATEK Automation WinProladder integer overflow vulnerability can be exploited by attackers to cause arbitrary code execution...

7.8CVSS7.8AI score0.00982EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/12 3:15 p.m.•14 views

CVE-2021-27486

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

7.8CVSS7.3AI score0.00982EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/12 3:15 p.m.•32 views

CVE-2021-27486

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

7.8CVSS0.00982EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/12 3:15 p.m.•32 views

Integer overflow

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

6.8CVSS7.9AI score0.00982EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2021/04/12 3:15 p.m.•12 views

CVE-2021-27486

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.00982EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/04/12 2:36 p.m.•44 views

CVE-2021-27486

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

8.2AI score0.00982EPSS
SaveExploits0References1
CVE
CVE
•added 2021/04/12 2:36 p.m.•66 views

CVE-2021-27486

FATEK Automation WinProladder (versions 3.30 and prior) is affected by CVE-2021-27486 due to an integer underflow (CWE-191) that can cause an out-of-bounds write and allow arbitrary code execution. The issue is specific to the WinProladder PLC software; the Red Hat and other CVE records corrobora...

7.8CVSS7.9AI score0.00982EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•2 views

CVE-2021-27486: Integer Underflow (Wrap or Wraparound)

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code...

7.8CVSS6.6AI score0.00982EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/04/12 12:00 a.m.•14 views

FATEK Automation WinProladder 数字错误漏洞

The official version of WinProLadder is a pretty good and useful PLC programming tool. FATEK Automation WinProladder integer overflow vulnerability can be exploited by attackers to cause arbitrary code execution...

7.8CVSS6.1AI score0.00982EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/08 12:00 a.m.•0 views

PT-2021-2651

Name of the Vulnerable Software and Affected Versions FATEK Automation WinProladder versions 3.30 and prior Description The issue is caused by an integer underflow, which may lead to an out-of-bounds write. This could allow an attacker to execute arbitrary code. Recommendations For versions 3.30...

7.8CVSS0.00982EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/04/08 12:00 a.m.•7 views

patek WinProladder 安全漏洞

winproladder is a PLC programming software of China patek Yonghong. The software has easy programming operations, super control, algorithmic commands, super communication, NC positioning functions and other features WinProladder Versions 3.30 and earlier versions have a security vulnerability tha...

6AI score
SaveExploits0References2
ICS
ICS
•added 2021/04/08 12:00 a.m.•74 views

FATEK Automation WinProladder

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerability: Integer Underflow 2. RISK EVALUATION Successful exploitation of this vulnerability could cause execution of arbitrary code. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS...

7.8CVSS7.9AI score0.00982EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
•added 2021/03/11 12:00 a.m.•29 views

(0Day) Fatek Automation PLC WinProladder PWD File Parsing Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation PLC WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

7.8CVSS5.6AI score
SaveExploits0
OSV
OSV
•added 2020/09/30 9:15 p.m.•18 views

CVE-2020-16234

In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code...

7.8CVSS7.7AI score0.01299EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/30 9:15 p.m.•37 views

CVE-2020-16234

In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code...

7.8CVSS0.01299EPSS
SaveExploits0References1
Prion
Prion
•added 2020/09/30 9:15 p.m.•30 views

Stack overflow

In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code...

6.8CVSS7.9AI score0.01299EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/09/30 8:44 p.m.•48 views

CVE-2020-16234 FATEK Automation PLC WinProladder

In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code...

8AI score0.01299EPSS
SaveExploits0References1
Rows per page
Query Builder