PT-2016-6686
CVE-2016-5798
·
تاريخ النشر
2016-12-14
·
تاريخ التحديث
2017-02-17
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Fatek Automation PM Designer version 2.1.2.2
Fatek Automation FV Designer version 1.2.8.0
Description
An issue allows an attacker to trigger a stack-based buffer overflow by sending additional valid packets, potentially causing a crash. Additionally, a malicious attacker can trigger a remote buffer overflow on the Fatek Communication Server.
Recommendations
For Fatek Automation PM Designer version 2.1.2.2, consider disabling the communication server functionality until a patch is available.
For Fatek Automation FV Designer version 1.2.8.0, restrict access to the vulnerable communication server to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾