CVE-2016-8377

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	Fatek Automation PLC WinProladder 3.11 Build 14701	Fatek Automation PLC WinProladder 3.11 Build 14701

References

http://www.securityfocus.com/bid/94938Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01Third Party Advisory, US Government Resource
https://www.exploit-db.com/exploits/42700/Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/94938Third Party Advisory, VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01Third Party Advisory, US Government Resource
https://www.exploit-db.com/exploits/42700/Third Party Advisory, VDB Entry

Timeline

Published: Feb 13, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-83789.8An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards fo CVE-2016-83798.1An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E121 CVE-2016-83807.3The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.CVE-2016-83828.8An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted CVE-2016-83838.8An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafte CVE-2016-83848.8An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter.CVE-2016-83857.8An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to CVE-2016-83867.8An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malformed font to XML, the t CVE-2016-83877.8An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an object encoded w/ multi CVE-2016-83887.8An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will CVE-2016-83897.8An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will attempt CVE-2016-83907.8An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially cr