Fatek

44 CVEs across 16 Fatek products. Browse Fatek vulnerabilities, severities, and proof-of-concept exploits.

Fatek products with known CVEs

ProductCVEs
Fvdesigner24
Winproladder14
Automation Fv Designer3
Automation Pm Designer2
Automation Fv Designer1
Automation Pm Designer V31
Automation Pm Designer V31
Communication Server1
Communication Server Firmware1
Ethernet Module Configuration Tool Cbe Firmware1
Ethernet Module Configuration Tool Cbeh Firmware1
Ethernet Module Configuration Tool Cm25e Firmware1
Ethernet Module Configuration Tool Cm55e Firmware1
Plc Ethernet Module1
Plc Winproladder1
Plc Winproladder Firmware1
Fatek CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-34273High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34272High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a…
CVE-2023-34271High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34270High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34269High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34268High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34267High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34266High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34265High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34264High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2023-34263High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a…
CVE-2023-34262High7.82024-05-03Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…
CVE-2022-2866High7.82022-08-31FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using malici…
CVE-2022-25170High7.82022-02-25The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary code
CVE-2022-23985High7.82022-02-25The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow…
CVE-2022-21209High7.82022-02-25The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow a…
CVE-2021-43556High7.82021-12-28FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to…
CVE-2021-43554High7.82021-12-28FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to execut…
CVE-2021-38442High7.82021-10-18FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-co…
CVE-2021-38440Low3.32021-10-18FATEK Automation WinProladder versions 3.30 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to read unauthorized information.
CVE-2021-38438High7.82021-10-18A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, whic…
CVE-2021-38436High7.82021-10-18FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-…
CVE-2021-38434High7.82021-10-18FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpe…
CVE-2021-38430High7.82021-10-18FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based b…
CVE-2021-38426High7.82021-10-18FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of…
CVE-2021-38432Critical9.82021-10-15FATEK Automation Communication Server Versions 1.13 and prior lacks proper validation of user-supplied data, which could result in a stack-based buffer overflo…
CVE-2021-32947High7.82021-08-11FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
CVE-2021-32939High7.82021-08-11FATEK Automation FvDesigner, Versions 1.5.88 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a…
CVE-2021-32931High7.82021-08-11An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing…
CVE-2021-32992Critical9.82021-06-29FATEK Automation WinProladder Versions 3.30 and prior do not properly restrict operations within the bounds of a memory buffer, which may allow an attacker to…
CVE-2021-32990Critical9.82021-06-29FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code.
CVE-2021-32988Critical9.82021-06-29FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.
CVE-2021-27486High7.82021-04-12FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to ex…
CVE-2021-22683High7.82021-03-03Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special proje…
CVE-2021-22670High7.82021-03-03An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker…
CVE-2021-22666High7.82021-03-03Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft…
CVE-2021-22662High7.82021-03-03A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacke…
CVE-2021-22638High7.82021-03-03Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special projec…
CVE-2020-16234High7.82020-09-30In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, whic…
CVE-2016-5800High7.52019-03-21A malicious attacker can trigger a remote buffer overflow in the Communication Server in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Des…
CVE-2017-6023Critical9.82017-03-16An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH vers…
CVE-2016-8377High8.02017-02-13An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software app…
CVE-2016-5798High7.52017-02-13An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. By sending additional valid packets, an…
CVE-2016-5796High8.82017-02-13An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could…