PT-2022-4527 · Fuji Electric · D300Win

Uri Katz · Published 2022-08-30 · Updated 2022-10-21 · CVE-2022-1738

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Fuji Electric D300win versions prior to 3.7.1.17

Description The issue is related to an out-of-bounds read and the use of memory after it has been freed. This could allow an attacker to leak sensitive data from the process memory or gain unauthorized access to protected information, potentially affecting data integrity.

Recommendations For Fuji Electric D300win versions prior to 3.7.1.17, update to version 3.7.1.17 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2022-05396

CVE-2022-1738

Affected Products

D300Win

References · 5

• https://bdu.fstec.ru/vul/2022-05396 · Security Note
• https://osv.dev/vulnerability/CVE-2022-1738 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-1738 · Security Note
• https://t.me/cibsecurity/51826 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsa-22-242-05 · Note