← Back to home
ICSA-17-073-01  ·  Published 2017-03-14  ·  View on CISA ICS-CERT ↗

FATEK Automation PLC Ethernet Module

CVSS 7.3 HIGH

Risk Summary

ATTENTION: Remotely exploitable. Low skill level to exploit.

CVEs (1)

Remediations

  • FATEK Automation has created a new version of the “ether_cfg software tool” to mitigate this vulnerability.
  • For more information about this vulnerability and how to mitigate it, please see the Fatek EtherConfig release note on the Fatek technical support web page

Affected Vendors

FATEK Automation

Affected Products (4)

FATEK Automation · CBEH < 3.6 Build 170215
FATEK Automation · CM25E < 3.6 Build 170215
FATEK Automation · CBE < 3.6 Build 170215
FATEK Automation · CM55E < 3.6 Build 170215

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more