CVE-2022-2866

Summary

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution.

Affected Software

Weaknesses

• CWE-787: CWE-787: Out-of-bounds Write

Workarounds

FATEK has not responded to requests to work with CISA to mitigate this vulnerability. Users of affected versions of FvDesigner are invited to contact FATEK customer support for additional information.

ADP Enrichment

CVE Program Container

Additional References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-237-01

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-237-01

• ←Previous
• Next→