CVE-2018-14802

Опубликовано: 01 окт. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution.

Ссылки

http://www.securityfocus.com/bid/105408
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/105408
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:fujielectric:frenic_loader_3.3_firmware:7.3.4.1a:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:fujielectric:frenic-ace:-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-eco:-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-mega:-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-mini\(c1\):-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-mini\(c2\):-:*:*:*:*:*:*:*

cpe:2.3:h:fujielectric:frenic-multi:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03062

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-121

CWE-119

Связанные уязвимости

GHSA-6jrx-jwwc-ffmx