PT-2014-7859 · Fujitsu+1 · Arrows Kiss F-03D+3

Masaaki Chida · Publicado 2014-12-05 · Atualizado 2014-12-08 · CVE-2014-7253

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FUJITSU F-12C (affected versions not specified) ARROWS Tab LTE F-01D (affected versions not specified) ARROWS Kiss F-03D (affected versions not specified) REGZA Phone T-01D for Android (affected versions not specified)

Description The issue allows local users to execute arbitrary commands via unspecified vectors. There is no information available about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2014-7253

Produtos afetados

Arrows Kiss F-03D

Arrows Tab Lte F-01D

Fujitsu F-12C

Regza Phone T-01D

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-7253 · Nota de Segurança
• http://jvn.jp/en/jp/JVN06302787/995312/index.html · Aviso do Fabricante
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000138.html · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN06302787/index.html · Aviso do Fabricante