Description
In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FATEK Automation | PLC WinProladder | unspecified – ≤ 3.28 | — |
Advisories 1
- ICSA-20-254-02 FATEK Automation PLC WinProladder CISA ICS & IT advisories · Sep 10, 2020