Read the docs

FATEK Automation

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

FATEK Automation records in CISA KEV

No FATEK Automation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Winproladder · all components

Priority MEDIUM 46

FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory buffer, which may allow an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2021-06-29 No fix listed CWE-119
Priority MEDIUM 46

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2021-06-29 No fix listed CWE-125
Priority MEDIUM 46

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2021-06-29 No fix listed CWE-787
Priority LOW 38

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02224 Published 2021-12-28 No fix listed CWE-121
Priority LOW 38

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02049 Published 2021-12-28 No fix listed CWE-787
Priority LOW 37

In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01299 Published 2020-09-30 No fix listed CWE-121
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-10-18 No fix listed CWE-119
Priority LOW 36

A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0102 Published 2021-10-18 No fix listed CWE-416
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-10-18 No fix listed CWE-119
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01036 Published 2021-10-18 No fix listed CWE-121
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-10-18 No fix listed CWE-787
Priority LOW 36

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01017 Published 2021-04-12 No fix listed CWE-191
Priority LOW 17

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00606 Published 2021-10-18 No fix listed CWE-125
Open these records in search →