PT-2016-7499

CVE-2016-8377

·

تاريخ النشر

2016-12-15

·

تاريخ التحديث

2021-10-28

الوصف من

CVSS 3.1
8.0
عالية
المقاييسAV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fatek Automation PLC WinProladder version 3.11 Build 14701
Description A stack-based buffer overflow issue exists when the software connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.
Recommendations For Fatek Automation PLC WinProladder version 3.11 Build 14701, consider restricting connections to trusted servers to minimize the risk of exploitation. As a temporary workaround, implement additional network security measures to block potential malicious connections until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ZDI-16-672
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾