CVE-2021-32931

Опубликовано: 11 авг. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

An uninitialized pointer in FATEK Automation FvDesigner, Versions 1.5.88 and prior may be exploited while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-21-217-02
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-1027/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1030/
Third Party Advisory
VDB Entry
https://us-cert.cisa.gov/ics/advisories/icsa-21-217-02
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-21-1027/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1030/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fatek:fvdesigner:*:*:*:*:*:*:*:*

Версия до 1.5.88 (включая)

EPSS

Процентиль: 53%

0.00297

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-824

Связанные уязвимости

GHSA-mx89-4jm3-jmv3

github

больше 3 лет назад