CVE-2021-38430

Name of the Vulnerable Software and Affected Versions FATEK Automation WinProladder versions 3.30 and prior

Description The issue is related to a stack-based buffer overflow in the FATEK Automation WinProladder software. This occurs due to improper validation of user-supplied data when parsing project files. An attacker could exploit this to execute arbitrary code, potentially by tricking a user into opening a specially crafted malicious file.

Recommendations For versions 3.30 and prior, ensure proper validation of user-supplied data when parsing project files to prevent a stack-based buffer overflow. As a temporary workaround, consider restricting the opening of project files from untrusted sources until a patch is available.