ICS Advisory: RoboDK RoboDK

Summary:

The CSAF document provides a report on a heap-based buffer overflow vulnerability (CVE-2024-0257) in RoboDK, a robotics development software. The vulnerability, rated 3.3 on the CVSS v3 scale, can cause the program to crash when processing a specific project file. The affected product is RoboDK v5.5.4 (Windows 64-bit). The vulnerability is not exploitable remotely, and no public exploitation has been reported. To mitigate the risk, users are advised to contact RoboDK and keep their systems updated, and implement defensive measures such as minimizing network exposure and using secure remote access methods. No patch is available, and the vendor has not responded to attempts at coordination.