PT-2016-6684

CVE-2016-5796

·

Published

2016-12-14

·

Updated

2017-02-17

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0
Description The issue allows an attacker to cause a crash or execute arbitrary code due to improper restriction of operations within the bounds of a memory buffer. This can be achieved by sending additional valid packets.
Recommendations For Fatek Automation PM Designer version 2.1.2.2, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution. For Fatek Automation FV Designer version 1.2.8.0, update to a version that addresses the improper restriction of operations within the bounds of a memory buffer to prevent potential crashes or arbitrary code execution.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-16-635
Found an issue in the description? Have something to add? Feel free to write us 👾