PT-2014-7859 · Fujitsu+1 · Arrows Kiss F-03D+3

Masaaki Chida · Published 2014-12-05 · Updated 2014-12-08 · CVE-2014-7253

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FUJITSU F-12C (affected versions not specified) ARROWS Tab LTE F-01D (affected versions not specified) ARROWS Kiss F-03D (affected versions not specified) REGZA Phone T-01D for Android (affected versions not specified)

Description The issue allows local users to execute arbitrary commands via unspecified vectors. There is no information available about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2014-7253

Affected Products

Arrows Kiss F-03D

Arrows Tab Lte F-01D

Fujitsu F-12C

Regza Phone T-01D

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-7253 · Security Note
• http://jvn.jp/en/jp/JVN06302787/995312/index.html · Vendor Advisory
• http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-000138.html · Vendor Advisory
• http://jvn.jp/en/jp/JVN06302787/index.html · Vendor Advisory