CVE-2016-8377

Published: Feb 13, 2017Modified: May 13, 2026

8.0

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.

Affected (1)

Products: Fatek: Plc Winproladder Firmware

1 product

Plc Winproladder Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Fatek Plc Winproladder Firmware	Version 3.11 build_14701

Running on/with	Platform Versions
Fatek Plc Winproladder	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

http://www.securityfocus.com/bid/94938

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.exploit-db.com/exploits/42700/

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/94938

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.exploit-db.com/exploits/42700/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.