Lucene search

[email protected]CVE-2018-14802

HistoryOct 01, 2018 - 1:29 p.m.

CVE-2018-14802

2018-10-0113:29:00

CWE-119

CWE-121

[email protected]

web.nvd.nist.gov

fuji electric

frenic loader

cve-2018-14802

arbitrary remote code execution

nvd

security vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution.

CPE configuration

NVD

fujielectricfrenic_loader_3.3_firmwareMatch7.3.4.1a

AND

fujielectricfrenic-aceMatch-

fujielectricfrenic-ecoMatch-

fujielectricfrenic-megaMatch-

fujielectricfrenic-mini\(c1\)Match-

fujielectricfrenic-mini\(c2\)Match-

fujielectricfrenic-multiMatch-

CPENameOperatorVersion
fujielectric:frenic_loader_3.3_firmwarefujielectric frenic loader 3.3 firmwareeq7.3.4.1a

CPE	Name	Operator	Version
fujielectric:frenic_loader_3.3_firmware	fujielectric frenic loader 3.3 firmware	eq	7.3.4.1a

CNA Affected

[
  {
    "product": "FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace",
    "vendor": "Fuji Electric",
    "versions": [
      {
        "status": "affected",
        "version": "v3.3 v7.3.4.1a"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105408

ics-cert.us-cert.gov/advisories/ICSA-18-270-03

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for CVE-2018-14802

cvelist1 prion1 nvd1 ics1