PT-2018-12744 · Fuji Electric · V-Server

Ghirmay Desta + 2 · Published 2018-09-12 · Updated 2019-10-09 · CVE-2018-14811

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior

Description Multiple untrusted pointer dereference issues have been identified, which may allow remote code execution. The vulnerabilities are related to the VPR file parsing and CArchive read functions.

Recommendations For Fuji Electric V-Server versions 4.0.3.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Untrusted Pointer Dereference

Weakness Enumeration

CWE-476

CWE-822

Related Identifiers

CVE-2018-14811

ZDI-18-1011

ZDI-18-1014

ZDI-18-1020

ZDI-18-1021

ZDI-18-1022

Affected Products

V-Server

References · 9

• https://zerodayinitiative.com/advisories/ZDI-18-1021 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-1020 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-1011 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-1022 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-14811 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-18-1014 · Security Note
• https://osv.dev/vulnerability/CVE-2018-14811 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01 · Note
• http://securityfocus.com/bid/105341 · Note