FATEK Automation FvDesigner

An attacker with local access to a machine running FvDesigner could execute arbitrary code with the privileges of the user running the application, potentially compromising engineering workstations and the ability to modify or monitor industrial control configurations.

Engineering teams and automation technicians at water utilities, electrical utilities, and manufacturing facilities that use FATEK FvDesigner for PLC and industrial controller programming and configuration. This affects the ability to safely maintain and update control system configurations.

An attacker must first gain local access to a machine running FvDesigner. This could happen through social engineering (tricking a user to click a malicious link or open an infected attachment), physical access to an engineering workstation, or lateral movement from another compromised system. Once local, the attacker can exploit memory corruption vulnerabilities (buffer overflow, use-after-free) to run arbitrary code in the context of the FvDesigner process.