CVE-2016-5796

HIGH

Fatek Automation PM Designer V3 <2.1.2.2 - Code Injection

Title source: llm
STIX 2.1

Description

An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a Memory Buffer.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93105
Mitigation, Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-16-287-06

Scores

CVSS v3 8.8
EPSS 0.0229
EPSS Percentile 81.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (3)
fatek/automation_fv_designer 1.2.8.0
fatek/automation_pm_designer 2.1.2.2
n/a/Fatek Automation Designer 2.1.2.2 Fatek Automation Designer 2.1.2.2
Published Feb 13, 2017
Tracked Since Feb 18, 2026