CVE-2018-14790

Опубликовано: 01 окт. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device.

Ссылки

http://www.securityfocus.com/bid/105408
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/105408
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:fujielectric:frenic_loader_3.3_firmware:7.3.4.1a:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:fujielectric:frenic-ace:-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-eco:-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-mega:-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-mini\(c1\):-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-mini\(c2\):-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-multi:-:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03475

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-126

CWE-125

Связанные уязвимости

GHSA-xp4v-39jp-m5f4