← Back

CVE-2018-14790

nvd nist
Published: Oct 1, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device.

Affected (1)

Fujielectric
1 product
Frenic Loader 3.3 Firmware
Configuration A
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Frenic Loader 3.3 Firmware
Version 7.3.4.1a
Running on/withPlatform Versions
Fujielectric
Frenic Ace
All versions
Fujielectric
Frenic Eco
All versions
Fujielectric
Frenic Mega
All versions
Fujielectric
Frenic Mini(c1)
All versions
Fujielectric
Frenic Mini(c2)
All versions
Fujielectric
Frenic Multi
All versions

Related CWEs

CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-126
Buffer Over-read
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (4)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryVDB Entry
Source: ics-cert@hq.dhs.gov
MitigationThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryUS Government Resource

Timeline

No history available yet.