Vulnerability Description
An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to execute arbitrary code, because of Improper Restriction of Operations within the Bounds of a Memory Buffer.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fatek | Automation Fv Designer | 1.2.8.0 |
| Fatek | Automation Pm Designer | 2.1.2.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93105Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-06MitigationThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/93105Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-06MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-5796?
CVE-2016-5796 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in Fatek Automation PM Designer V3 Version 2.1.2.2, and Automation FV Designer Version 1.2.8.0. Sending additional valid packets could allow the attacker to cause a crash or to...
How severe is CVE-2016-5796?
CVE-2016-5796 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-5796?
Check the references section above for vendor advisories and patch information. Affected products include: Fatek Automation Fv Designer, Fatek Automation Pm Designer.