CVE-2022-23985: ICSA-22-055-01 FATEK Automation FvDesigner

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-23985

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

ICSA-22-055-01 FATEK Automation FvDesigner

Source: NVD (National Vulnerability Database)

Vulnerability Description

The affected product is vulnerable to an out-of-bounds write while processing project files, which allows an attacker to craft a project file that would allow arbitrary code execution.

Source: NVD (National Vulnerability Database)

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Source: NVD (National Vulnerability Database)

Vulnerability Type

跨界内存写

Source: NVD (National Vulnerability Database)

Vulnerability Title

FATEK Automation FvDesigner 缓冲区错误漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

FATEK Automation FvDesigner是FATEK 的一个人机交互设备。 FATEK Automation FvDesigner存在缓冲区错误漏洞，该漏洞源于在处理项目文件时发生越界写入，这使得攻击者可利用该漏洞可以创建一个允许任意代码执行的项目文件。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
FATEK Automation	FvDesigner	all ~ 1.5.100	-

II. Public POCs for CVE-2022-23985

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2022-23985

Please Login to view more intelligence information

https://www.zerodayinitiative.com/advisories/ZDI-22-433/x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-434/x_refsource_MISC
https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-01x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-438/x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-432/x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-440/x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-437/x_refsource_MISC
https://nvd.nist.gov/vuln/detail/CVE-2022-23985

IV. Related Vulnerabilities

Same product: FvDesigner

Same vendor: FATEK Automation

Same weakness: CWE-787

V. Comments for CVE-2022-23985

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2022-23985

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2022-23985

III. Intelligence Information for CVE-2022-23985

IV. Related Vulnerabilities

V. Comments for CVE-2022-23985

Leave a comment