CVE-2016-8377 An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server,....
HighCVSS 8.0
EPSS 8.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fatek plc winproladder firmware | = 3.11-build_14701 | No fix listed |
References
- 94938 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource
- 42700 exploit third-party-advisory vdb-entry