FATEK Automation vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-34273 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34272 Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34271 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34270 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34269 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34268 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34267 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34266 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34265 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34264 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34263 Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-34262 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability.High 7.8 · May 2, 2024
• CVE-2022-2866 FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files.High 7.8 · Aug 31, 2022
• CVE-2022-25170 The affected product is vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to execute arbitrary codeHigh 7.8 · Feb 25, 2022
• CVE-2022-23985 The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow aHigh 7.8 · Feb 25, 2022
• CVE-2022-21209 The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arHigh 7.8 · Feb 25, 2022
• CVE-2021-43556 FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may allow an attacker to High 7.8 · Dec 28, 2021
• CVE-2021-43554 FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow an attacker to executeHigh 7.8 · Dec 28, 2021
• CVE-2021-38442 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a heap-corHigh 7.8 · Oct 18, 2021
• CVE-2021-38438 A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, whichHigh 7.8 · Oct 18, 2021
• CVE-2021-38436 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in a memory-cHigh 7.8 · Oct 18, 2021
• CVE-2021-38434 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpecHigh 7.8 · Oct 18, 2021
• CVE-2021-38430 FATEK Automation WinProladder versions 3.30 and prior proper validation of user-supplied data when parsing project files, which could result in a stack-based buHigh 7.8 · Oct 18, 2021
• CVE-2021-38426 FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an out-of-High 7.8 · Oct 18, 2021
• CVE-2021-38432 FATEK Automation Communication Server Versions 1.13 and prior lacks proper validation of user-supplied data, which could result in a stack-based buffer overflowCritical 9.8 · Oct 15, 2021