What’s Vulnerable › Vulnerabilities

CVE-2016-8377

• Severity: high (CVSS 8.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-02-13 · updated 2026-06-17
• Weakness: CWE-119

Description

An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to a malicious server, resulting in a stack buffer overflow. This causes an exploitable Structured Exception Handler (SEH) overwrite condition that may allow remote code execution.

Affected products

• Fatek Automation PLC WinProladder 3.11 Build 14701: 3.11-build_14701

References

• http://www.securityfocus.com/bid/94938
• https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01
• https://www.exploit-db.com/exploits/42700/
• http://www.securityfocus.com/bid/94938
• https://ics-cert.us-cert.gov/advisories/ICSA-16-350-01
• https://www.exploit-db.com/exploits/42700/

Get alerted when CVE-2016-8377 or the next vulnerability affects your stack