Code injection

An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

CVE-2021-22670

CVE-2021-22670 affects FATEK Automation FvDesigner (Version 1.5.76 and earlier). The root cause is an uninitialized pointer during FPJ/project-file processing, enabling an attacker to craft a specially formed project file that may permit arbitrary code execution. Public sources describe exploitat...

CVE-2021-22670

An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution...

Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Fatek FvDesigner Uninitialized Pointer Access Vulnerability

Fatek FvDesigner is a software tool for designing and developing projects for the FATEK FV HMI series. An uninitialized pointer access vulnerability exists in Fatek FvDesigner 1.5.76 and earlier versions when handling project files. An attacker can exploit this vulnerability to execute arbitrary...

FATEK Automation FvDesigner

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: FATEK Automation Equipment: FvDesigner Vulnerabilities: Use After Free, Access of Uninitialized Pointer, Stack-based Buffer Overflow, Out-of-Bounds Write, Out-of-Bounds Read 2. RISK EVALUATION Successful exploitation...

FATEK FvDesigner 缓冲区错误漏洞

Fatek FvDesigner is a software tool for designing and developing projects for the FATEK FV HMI series. An uninitialized pointer access vulnerability exists in Fatek FvDesigner 1.5.76 and earlier versions when handling project files. An attacker can exploit this vulnerability to execute arbitrary...

The vulnerability of the JunOS Evolved operating system, related to access to an uninitialized pointer, allows a hacker to trigger a service failure.

The vulnerability of the JunOS Evolved operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using specially crafted BGP update packets...

CVE-2021-22639

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

CVE-2021-22639

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

Null pointer dereference

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

CVE-2021-22639

CVE-2021-22639 affects Fuji Electric Tellus Lite V‑Simulator and V‑Server Lite (versions before 4.0.10.0). The issue is an uninitialized pointer in how the application processes project files, which may allow an attacker to craft a special project file to achieve arbitrary code execution in the a...

CVE-2021-22639

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0...

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Fuji Electric Equipment: Tellus Lite V-Simulator and V-Server Lite Vulnerabilities: Stack-based Buffer Overflow, Out-of-Bounds Read, Out-of-Bounds Write, Access of Uninitialized Pointer, Heap-based Buffer Overflow 2...

CVE-2021-0209

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service DoS. Continued receipt of these types of valid BGP update packets will cause an extended Denia...

Design/Logic Flaw

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service DoS. Continued receipt of these types of valid BGP update packets will cause an extended Denia...

CVE-2020-17469

An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn't have a reference to the previous one which supposedly resides in the reassembly list. When faced with an incoming...

Design/Logic Flaw

An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn't have a reference to the previous one which supposedly resides in the reassembly list. When faced with an incoming...

CVE-2020-17469

Concrete details available: CVE-2020-17469 affects FNET up to version 4.6.4 in the IPv6 fragment reassembly path. The bug is an uninitialized pointer dereference in _fnet_ip6_reassembly (fnet_ip6.c) when handling fragments with holes in a non-empty list, enabling Denial-of-Service. Affects FNET's...

CVE-2020-17469

An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn't have a reference to the previous one which supposedly resides in the reassembly list. When faced with an incoming...