The Fatek Automation WinProladder Versions 3.3 and prior are vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-27486
• https://us-cert.cisa.gov/ics/advisories/icsa-21-098-01