CVE-2021-38438

Name of the Vulnerable Software and Affected Versions FATEK Automation WinProladder versions 3.30 and prior

Description The issue is related to a use after free vulnerability when parsing project files, which may allow arbitrary code execution if a valid user opens a malformed project file. This could potentially enable an attacker to execute arbitrary code.

Recommendations For versions 3.30 and prior, avoid opening malformed project files until a patch is available. As a temporary workaround, consider restricting access to project file parsing functionality until a fix is released. At the moment, there is no information about a newer version that contains a fix for this vulnerability.