Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Priority LOW 38

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02049 Published 2021-12-28 No fix listed CWE-787
Priority LOW 38

FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02224 Published 2021-12-28 No fix listed CWE-121
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-corruption condition.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-10-18 No fix listed CWE-119
Priority LOW 36

A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0102 Published 2021-10-18 No fix listed CWE-416
Priority LOW 17

FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00606 Published 2021-10-18 No fix listed CWE-125
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corruption condition.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-10-18 No fix listed CWE-119
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-bounds write.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-10-18 No fix listed CWE-787
Priority LOW 36

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01036 Published 2021-10-18 No fix listed CWE-121
Priority MEDIUM 46

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2021-06-29 No fix listed CWE-787
Priority MEDIUM 46

FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory buffer, which may allow an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2021-06-29 No fix listed CWE-119
Priority MEDIUM 46

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01767 Published 2021-06-29 No fix listed CWE-125
Priority LOW 36

FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01017 Published 2021-04-12 No fix listed CWE-191
Priority LOW 37

In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01299 Published 2020-09-30 No fix listed CWE-121