PT-2018-12744 · Fuji Electric · V-Server

Ghirmay Desta + 2 · Publicado 2018-09-12 · Atualizado 2019-10-09 · CVE-2018-14811

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior

Description Multiple untrusted pointer dereference issues have been identified, which may allow remote code execution. The vulnerabilities are related to the VPR file parsing and CArchive read functions.

Recommendations For Fuji Electric V-Server versions 4.0.3.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Untrusted Pointer Dereference

Enumeração de Fraquezas

CWE-476

CWE-822

Identificadores relacionados

CVE-2018-14811

ZDI-18-1011

ZDI-18-1014

ZDI-18-1020

ZDI-18-1021

ZDI-18-1022

Produtos afetados

V-Server

Referências · 9

• https://zerodayinitiative.com/advisories/ZDI-18-1021 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-1020 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-1011 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 · Nota
• https://zerodayinitiative.com/advisories/ZDI-18-1022 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-14811 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-18-1014 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-14811 · Aviso do Fabricante
• http://securityfocus.com/bid/105341 · Nota