An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/96892 | VDB Entry Third Party Advisory |
| https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
28 Oct 2021, 11:54
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:fatek_automation:_ethernet_module_configuration_tool_cm25e_firmware:*:build_170215:*:*:*:*:*:* cpe:2.3:o:fatek_automation:_ethernet_module_configuration_tool_cbeh_firmware:*:build_170215:*:*:*:*:*:* cpe:2.3:o:fatek_automation:_ethernet_module_configuration_tool_cbe_firmware:*:build_170215:*:*:*:*:*:* cpe:2.3:h:fatek_automation:plc_ethernet_module:-:*:*:*:*:*:*:* |
cpe:2.3:o:fatek:ethernet_module_configuration_tool_cbe_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:fatek:ethernet_module_configuration_tool_cbeh_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:fatek:ethernet_module_configuration_tool_cm25e_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:fatek:ethernet_module_configuration_tool_cm55e_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:fatek:plc_ethernet_module:-:*:*:*:*:*:*:* |
Information
Published : 2017-03-16 04:59
Updated : 2024-02-04 19:11
NVD link : CVE-2017-6023
Mitre link : CVE-2017-6023
CVE.ORG link : CVE-2017-6023
JSON object : View
Products Affected
fatek
- ethernet_module_configuration_tool_cm25e_firmware
- ethernet_module_configuration_tool_cm55e_firmware
- ethernet_module_configuration_tool_cbe_firmware
- plc_ethernet_module
- ethernet_module_configuration_tool_cbeh_firmware