CVE-2022-21209: Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
First published: Fri Feb 25 2022(Updated: )
The affected product is vulnerable to an out-of-bounds read while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fatek FvDesigner | <=1.5.100 | |
| Fatek Automation FvDesigner | <=1.5.100 | |
| Fatek Automation FvDesigner |
Remedy
FATEK has not responded to requests to work with CISA to mitigate these vulnerabilities. Users of these affected products are invited to contact FATEK customer support for additional information.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-21209?
CVE-2022-21209 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Fatek Automation FvDesigner.
How severe is CVE-2022-21209?
CVE-2022-21209 has a severity value of 7.8 (high).
Is user interaction required to exploit CVE-2022-21209?
Yes, user interaction is required to exploit CVE-2022-21209 by visiting a malicious page or opening a malicious file.
- collector/nvd-index
- agent/type
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-436
- alias/ZDI-CAN-14853
- alias/CVE-2022-21209
- alias/ZDI-22-439
- alias/ZDI-CAN-14858
- alias/ZDI-22-435
- alias/ZDI-CAN-14591
- agent/remedy
- agent/references
- agent/title
- agent/author
- agent/severity
- agent/weakness
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/fatek
- canonical/fatek fvdesigner
- version/fatek fvdesigner/1.5.100
- vendor/fatek automation
- canonical/fatek automation fvdesigner
- version/fatek automation fvdesigner/1.5.100