CVE-2021-38438highCWE-416

CVE-2021-38438: high-severity vulnerability in FATEK Automation WinProladder

FATEK Automation WinProladder

Published · Updated

Follow this CVE+ Monitor WinProladder

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 1.0%
A use after free vulnerability in FATEK Automation WinProladder versions 3.30 and prior may be exploited when a valid user opens a malformed project file, which may allow arbitrary code execution.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
FATEK Automation · WinProladder
Related CVEs — FATEK Automation WinProladder

In the same product, most dangerous first.

CVE-2021-43556HIGHFATEK Automation WinProladderEPSS 2.2%CVE-2021-43554HIGHFATEK Automation WinProladderEPSS 2.0%CVE-2021-38430HIGHFATEK Automation WinProladderEPSS 1.0%CVE-2021-38436HIGHFATEK Automation WinProladderEPSS 1.0%CVE-2021-38434HIGHFATEK Automation WinProladderEPSS 1.0%CVE-2021-38442HIGHFATEK Automation WinProladderEPSS 1.0%