PT-2023-3774 · Fatek Automation · Fvdesigner

CVE-2023-34263

·

Published

2023-05-31

·

Updated

2024-05-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fatek Automation FvDesigner (affected versions not specified)
Description This issue allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner. User interaction is required to exploit this issue, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of FPJ files, resulting from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this issue to execute code in the context of the current process.
Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Access of Uninitialized Pointer

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2023-04063
CVE-2023-34263
ZDI-23-761

Affected Products

Fvdesigner