CVE-2021-38430

HIGH

FATEK Automation WinProladder <3.30 - Buffer Overflow

Title source: llm

Description

FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buffer overflow. An attacker could leverage this vulnerability to execute arbitrary code.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://us-cert.cisa.gov/ics/advisories/icsa-21-280-06

Scores

CVSS v3 7.8

EPSS 0.0097

EPSS Percentile 57.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-121

Status published

Products (1)

fatek/winproladder < 3.30

Published Oct 18, 2021

Tracked Since Feb 18, 2026