CVE-2016-5798

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0

Description An issue allows an attacker to trigger a stack-based buffer overflow by sending additional valid packets, potentially causing a crash. Additionally, a malicious attacker can trigger a remote buffer overflow on the Fatek Communication Server.

Recommendations For Fatek Automation PM Designer version 2.1.2.2, consider disabling the communication server functionality until a patch is available. For Fatek Automation FV Designer version 1.2.8.0, restrict access to the vulnerable communication server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.