FATEK Automation WinProladder
view advisory published 2021-11-16
Successful exploitation of these vulnerabilities could allow for arbitrary code execution.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43556US | high7.8 | — | ||
FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary co… | ||||
| CVE-2021-43554US | high7.8 | — | ||
FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-21-320-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-21-320-01 Web Versionself
- Recommended Practicesexternal
03
remediations (2)
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan