FATEK Automation WinProladder
Advisory ansehen veröffentlicht 2021-11-16
Successful exploitation of these vulnerabilities could allow for arbitrary code execution.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-43556US | high7.8 | — | ||
FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary co… | ||||
| CVE-2021-43554US | high7.8 | — | ||
FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-21-320-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- ICS Advisory ICSA-21-320-01 Web Versionself
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
- MitigationWinProladder
Do not click web links or open unsolicited attachments in email messages.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan