CVE-2018-14802 - Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace

Back Back to CVE browser

CRITICAL

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace

Published Oct 1, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 3.58%

Description

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution.

Affected products

Vendor Fuji Electric Product n/a Default
n/a
- Version
  v3.3 v7.3.4.1a
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fuji Electric

n/a

Version	Status	Constraints
v3.3 v7.3.4.1a	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-121

References (2)

http://www.securityfocus.com/bid/105408
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/105408		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource