An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/96892 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01 | Third Party Advisory US Government Resource |
| http://www.securityfocus.com/bid/96892 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 03:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/96892 - Third Party Advisory, VDB Entry | |
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01 - Third Party Advisory, US Government Resource |
Information
Published : 2017-03-16 04:59
Updated : 2024-11-21 03:28
NVD link : CVE-2017-6023
Mitre link : CVE-2017-6023
CVE.ORG link : CVE-2017-6023
JSON object : View
Products Affected
fatek
- ethernet_module_configuration_tool_cbeh_firmware
- plc_ethernet_module
- ethernet_module_configuration_tool_cm25e_firmware
- ethernet_module_configuration_tool_cbe_firmware
- ethernet_module_configuration_tool_cm55e_firmware