CVE-2016-8377

CVE-2016-8377 affects Fatek Automation PLC WinProladder v3.11 Build 14701. A stack-based buffer overflow occurs when the application connects to a malicious server, causing a stack overflow and an exploitable SEH overwrite that may lead to remote code execution. Multiple sources (NVD, ICS-CERT ad...

CVE-2016-8377: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler SEH...

CVE-2016-5796: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a...

CVE-2016-5798: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an attacker could trigger a stack-based buffer overflow and cause a crash. Also, a malicious attacker can trigger a remote buffer overflow o...

PT-2016-7499

Name of the Vulnerable Software and Affected Versions Fatek Automation PLC WinProladder version 3.11 Build 14701 Description A stack-based buffer overflow issue exists when the software connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured...

Fatek Automation PLC WinProladder Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation PLC WinProladder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

PT-2016-6686

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description An issue allows an attacker to trigger a stack-based buffer overflow by sending additional valid packets, potentially causing a crash...

Fatek Automation Communication Server Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation Communication Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of query requests. An overly long string sent while...

Fatek Automation FvDesigner Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2016-6684

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0 Description The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memo...

Fatek Automation PM Designer Remote Command Execution Vulnerability

Fatek Automation PM Designer is a programmable logic controller from Fatek Automation. A remote code execution vulnerability exists in Fatek Automation PM Designer. An attacker could use this vulnerability to execute arbitrary code in the context of an affected application, which could also resul...

Fatek Automation PM Designer Remote Code Execution Vulnerability

Fatek Automation PM Designer is a programmable logic controller from Fatek Automation. A remote code execution vulnerability exists in Fatek Automation PM Designer, which could be exploited by an attacker to execute arbitrary code in an affected application, possibly also resulting in a denial of...

(0Day) Fatek Automation PM Designer Heap Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation PM Designer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

FATEK Automation PLC WinProladder Stack-Based Buffer Overflow Vulnerability

OVERVIEW A researcher working with Trend Micro’s Zero Day Initiative ZDI has identified a stack-based buffer overflow vulnerability in FATEK Automation's PLC WinProladder application. Fatek Automation Fatek has not produced an update to mitigate this vulnerability. ZDI has coordinated with...

FATEK Automation Designer Memory Corruption Vulnerabilities

OVERVIEW Ariele Caltabiano kimiya working with Trend Micro’s Zero Day Initiative ZDI has identified a heap memory corruption and two stack buffer overflow vulnerabilities in Fatek’s Automation PM and FV Designer applications. Fatek has not produced an update to mitigate these vulnerabilities. ZDI...