NVD

Id
83280  
Name
CVE-2017-6023  
Description
An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE versions prior to V3.6 Build 170215, CM55E versions prior to V3.6 Build 170215, and CM25E versions prior to V3.6 Build 170215. A stack-based buffer overflow vulnerability has been identified, which may allow remote code execution or crash the affected device.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
8.5  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:C)  
Pub Date
2017-04-27  
Published
2017-03-16  
Modified Date
2017-03-31  
Seq
2017-6023  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408102 83280 CVE-2016-8313 1037636  View
409355 83280 CVE-2016-6249 https://support.f5.com/csp/article/K12685114  View
409356 83280 CVE-2016-6249 https://support.f5.com/csp/article/K12685114  View
411343 83280 CVE-2017-2786 96736  View
411344 83280 CVE-2017-2786 http://www.talosintelligence.com/reports/TALOS-2017-0281/  View
411345 83280 CVE-2017-2786 96736  View
411346 83280 CVE-2017-2786 http://www.talosintelligence.com/reports/TALOS-2017-0281/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66402 JVNDB-2017-002740 複数の Fatek Automation PLC Ethernet Module 上で動作する Ether_cfg ソフトウェア設定ツールにおけるバッファエラーの脆弱性 複数の Fatek Automation PLC Ethernet Module 上で動作する Ether_cfg ソフトウェア設定ツールには、バッファエラーの脆弱性が存在します。 CVE-2017-6023 0 CVE-2017-6023 83280 9 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002740.html 2017-03-14 2017-04-26 View