Lucene search
+L

439 matches found

NVD
NVD
added 2021/12/28 7:15 p.m.31 views

CVE-2021-43556

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS0.02091EPSS
SaveExploits0References4
OSV
OSV
added 2021/12/28 7:15 p.m.9 views

CVE-2021-43556

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.02091EPSS
SaveExploits0References4
Prion
Prion
added 2021/12/28 7:15 p.m.22 views

Out-of-bounds

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

6.8CVSS7.9AI score0.01926EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/12/28 7:15 p.m.24 views

Stack overflow

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

6.8CVSS8AI score0.02091EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2021/12/28 6:17 p.m.73 views

CVE-2021-43554

The CVE-2021-43554 issue affects Fatek Automation WinProladder (versions 3.30_24518 and earlier) and stems from an out-of-bounds write during PDW file parsing. ZDI advisories describe a remote code execution vulnerability (CWE-787) with a write before the start or before the allocated buffer, exp...

7.8CVSS7.9AI score0.01926EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/12/28 6:17 p.m.42 views

CVE-2021-43554 FATEK Automation WinProladder

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.01926EPSS
SaveExploits0References4
CVE
CVE
added 2021/12/28 6:17 p.m.75 views

CVE-2021-43556

CVE-2021-43556 affects FATEK WinProladder: versions 3.30_24518 and earlier are vulnerable to a stack-based buffer overflow while processing project files (SPF/TAB/PDW variants, per ZDI advisories). The root cause is improper validation of the length of user-supplied data copied into a stack buffe...

7.8CVSS8AI score0.02091EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2021/12/28 6:17 p.m.39 views

CVE-2021-43556 FATEK Automation WinProladder

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.02091EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.7 views

The vulnerability of the FATEK WinProladder controller programming software lies in the ability to write beyond the buffer memory boundaries, allowing a hacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.01926EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.5 views

The vulnerability of the FATEK WinProladder software for controlling controllers arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.02091EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/16 6:56 p.m.2 views

CVE-2021-43554

FATEK WinProladder Versions 3.3024518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code...

7.8CVSS7.3AI score0.01926EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/11/16 12:0 a.m.10 views

The vulnerability of the FATEK WinProladder controller programming software lies in the use of memory after it is freed, allowing a hacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software lies in the use of memory after it is freed during syntax analysis of project files. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.00959EPSS
SaveExploits0References5Affected Software1
ICS
ICS
added 2021/11/16 12:0 a.m.43 views

FATEK Automation WinProladder

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: WinProladder Vulnerabilities: Out-of-bounds Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for arbitrary code execution. 3...

7.8CVSS8.4AI score0.02091EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/11/12 12:0 a.m.10 views

The vulnerability of the FATEK WinProladder controller programming software lies in the fact that the write operation can exceed the buffer boundaries into memory, allowing an attacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software lies in the fact that the write operation goes beyond the buffer boundaries when analyzing project files syntactically. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created...

7.8CVSS7.9AI score0.00912EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.8 views

The vulnerability of the FATEK WinProladder controller programming software lies in the fact that the write operation can exceed the buffer boundaries into memory. This allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the FATEK WinProladder controller programming software lies in the fact that the write operation goes beyond the buffer boundaries into memory during PDW-file syntax analysis. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures...

7.8CVSS7.9AI score0.00912EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.6 views

The vulnerability of the Fatek Automation Communication Server arises from operations that go beyond the buffer boundaries in memory, allowing attackers to cause service failures or execute arbitrary code.

The vulnerability of the Fatek Automation Communication Server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code by sending specially crafted requests...

10CVSS8.6AI score0.01758EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/21 12:0 a.m.7 views

The vulnerability of the FATEK WinProladder software for controlling controllers arises from buffer overflows in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by causing the user to open a specially created malicious file...

7.8CVSS8AI score0.00973EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/21 12:0 a.m.8 views

The vulnerability of the FATEK WinProladder controller programming software lies in an unexpected expansion of the symbol, allowing a hacker to execute arbitrary code.

The vulnerability of the FATEK WinProladder controller programming software is related to an unexpected expansion of the signature. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by having the user open a specially created malicious file...

7.8CVSS7.7AI score0.00912EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2021/10/18 1:15 p.m.26 views

CVE-2021-38440

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information...

4.3CVSS0.00569EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/18 1:15 p.m.3 views

CVE-2021-38440

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information...

3.3CVSS5.8AI score0.00569EPSS
SaveExploits0References1
Rows per page
Query Builder