PT-2016-6684

CVE-2016-5796

·

Publicado

2016-12-14

·

Atualizado

2017-02-17

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0
Description The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memory buffer. This can be achieved by sending additional valid packets.
Recommendations For Fatek Automation PM Designer version 2.1.2.2, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution. For Fatek Automation FV Designer version 1.2.8.0, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
ZDI-16-635
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾