FATEK Automation FvDesigner

Summary

Vulnerabilities 1

• High 7.8
  CVE-2022-2866

  FATEK Automation FvDesigner Out-of-bounds Write

  FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution.

  FATEK Automation FvDesigner
  Aug 31, 2022

Revision history

1. 2022-08-25 #1

   Publication Date

References

• ICS Advisory ICSA-22-237-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-22-237-01
• Recommended Practices
  https://www.fatek.com/en/contact_us.php
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014
• Recommended Practices
  https://www.cisa.gov/news-events/ics-advisories/icsa-22-237-01
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf