PT-2016-6684

CVE-2016-5796

·

تاريخ النشر

2016-12-14

·

تاريخ التحديث

2017-02-17

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0
Description The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memory buffer. This can be achieved by sending additional valid packets.
Recommendations For Fatek Automation PM Designer version 2.1.2.2, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution. For Fatek Automation FV Designer version 1.2.8.0, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ZDI-16-635
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾