PT-2017-16839 · Fatek · Ether Cfg+3

Published 2017-03-16 · Updated 2021-10-28 · CVE-2017-6023

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fatek CBEH versions prior to V3.6 Build 170215 Fatek CBE versions prior to V3.6 Build 170215 Fatek CM55E versions prior to V3.6 Build 170215 Fatek CM25E versions prior to V3.6 Build 170215

Description A stack-based buffer overflow issue has been identified in the Ether cfg software configuration tool, which may allow remote code execution or cause the affected device to crash.

Recommendations For Fatek CBEH versions prior to V3.6 Build 170215, update to version V3.6 Build 170215 or later. For Fatek CBE versions prior to V3.6 Build 170215, update to version V3.6 Build 170215 or later. For Fatek CM55E versions prior to V3.6 Build 170215, update to version V3.6 Build 170215 or later. For Fatek CM25E versions prior to V3.6 Build 170215, update to version V3.6 Build 170215 or later.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

CVE-2017-6023

ZDI-17-465

Affected Products

Ether Cfg

Fatek Cbe

Fatek Cm25E

Fatek Cm55E

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-6023 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6023 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-17-465 · Security Note
• http://securityfocus.com/bid/96892 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-073-01 · Note