CVE-2021-32988: FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

PriorityP260critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.75%

75.1th percentile

FATEK Automation WinProladder Versions 3.30 and prior are vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
fatek	winproladder	<= 3.30	—

Detection & IOCsextracted from sources · hover to see the quote

→CVE-2021-32988 is triggered via a malicious project file opened by the user — monitor for suspicious WinProladder project file opens from untrusted sources ↗
→The vulnerability requires local access and user interaction (UI:R); attack vector is local (AV:L), so focus detection on local file-open events within WinProladder on endpoints ↗
→No known public exploits exist and the vulnerability is not remotely exploitable — prioritize endpoint/host-based detection over network signatures ↗

·Affected versions are WinProladder 3.30 and prior; no patched version was available at time of advisory publication ↗
·FATEK Automation was still developing a fix at time of advisory; no vendor patch version to target for upgrade detection rules ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.