FATEK Automation WinProladder
Successful exploitation of these vulnerabilities may allow arbitrary code execution, remote code execution, heap corruption, and unauthorized information disclosure.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-38442US | high7.8 | — | ||
FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition. A… | ||||
| CVE-2021-38440US | low3.3 | — | ||
FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information. | ||||
| CVE-2021-38438US | high7.8 | — | ||
A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary… | ||||
| CVE-2021-38436US | high7.8 | — | ||
FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition.… | ||||
| CVE-2021-38434US | high7.8 | — | ||
FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension.… | ||||
| CVE-2021-38430US | high7.8 | — | ||
FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An at… | ||||
| CVE-2021-38426US | high7.8 | — | ||
FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write. An att… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-21-280-06 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-21-280-06 Web Versionself
- Recommended Practicesexternal
Behebungen (7)
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan