PT-2019-7835

CVE-2016-5800

Published

2019-03-21

Updated

2019-10-09

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Fatek Automation PM Designer V3 version 2.1.2.2 Fatek Automation FV Designer version 1.2.8.0

Description A malicious attacker can trigger a remote buffer overflow in the Communication Server.

Recommendations For Fatek Automation PM Designer V3 version 2.1.2.2, update to a version that fixes this issue. For Fatek Automation FV Designer version 1.2.8.0, update to a version that fixes this issue.

Exploitability

Fix

Impacts

Researchers

Ariele Caltabiano

Kimiya

Vendors

Affected products

Weakness enumeration

CWE-121: Stack-based Buffer Overflow

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers