PT-2016-6684
CVE-2016-5796
·
Published
2016-12-14
·
Updated
2017-02-17
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Fatek Automation PM Designer version 2.1.2.2
Fatek Automation FV Designer version 1.2.8.0
Description
The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memory buffer. This can be achieved by sending additional valid packets.
Recommendations
For Fatek Automation PM Designer version 2.1.2.2, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution.
For Fatek Automation FV Designer version 1.2.8.0, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾