PT-2023-9168 · Fuji Electric · Fuji Electric Alpha5 Smart

Published 2023-07-06 · Updated 2025-01-17 · CVE-2024-34579

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The Fuji Electric Alpha5 SMART system is affected by a stack-based buffer overflow, which may allow an attacker to execute arbitrary code. This issue can be exploited through a crafted input that overflows the buffer, leading to code execution. An exploit for this issue is available, with links to the exploit code provided. The vulnerable software is Fuji Electric Alpha5 SMART, but the specific versions affected are not specified. It is worth noting that the provided links may contain the exploit code, but it's essential to ensure they are from trusted sources before accessing them. #FujiElectric #Alpha5SMART #StackBasedBufferOverflow #BufferOverflow #Cybersecurity #Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-04345

CVE-2024-34579

ZDI-24-536

ZDI-24-537

Affected Products

Fuji Electric Alpha5 Smart

References · 12

• https://bdu.fstec.ru/vul/2024-04345 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-537 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-536 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-34579 · Security Note
• https://t.me/cvedetector/15675 · Telegram Post
• https://vuldb.com/ru/?id.266773 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-016-05 · Note
• https://fujielectric.com/products/drives_inverters/servo/product_series/alpha5smart_overview.html · Note
• https://twitter.com/CVEnew/status/1880248080798478788 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1880171321293668505 · Twitter Post
• https://t.me/cvenotify/107713 · Telegram Post
• https://twitter.com/CveFindCom/status/1880058168933224490 · Twitter Post