CVE-2022-2866

FATEK FvDesigner version 1.5.103 and prior is vulnerable to an out-of-bounds write while processing project files. If a valid user is tricked into using maliciously crafted project files, an attacker could achieve arbitrary code execution.

• CWE-787

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-237-01Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-237-01Third Party Advisory, US Government Resource

Published

Aug 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28653Users can consume unlimited disk space in /var/crash7.5
• CVE-2022-28654is_closing_session() allows users to fill up apport.log5.5
• CVE-2022-28655is_closing_session() allows users to create arbitrary tcp db…7.1
• CVE-2022-28656is_closing_session() allows users to consume RAM in the Appo…5.5
• CVE-2022-28657Apport does not disable python crash handler before entering…7.8
• CVE-2022-28658Apport argument parsing mishandles filename splitting on old…5.5
• CVE-2022-28660The querier component in Grafana Enterprise Logs 1.1.x throu…9.8
• CVE-2022-28661A vulnerability has been identified in Simcenter Femap (All …8.8
• CVE-2022-28662A vulnerability has been identified in Simcenter Femap (All …6.5
• CVE-2022-28663A vulnerability has been identified in Simcenter Femap (All …7.8
• CVE-2022-28664A memory corruption vulnerability exists in the httpd unesca…9.8
• CVE-2022-28665A memory corruption vulnerability exists in the httpd unesca…9.8