CVE-2018-14794

2018-10-0113:00:00

CWE-122

icscert

www.cve.org

AI Score

9.2

Confidence

High

EPSS

0.002

Percentile

58.8%

JSON

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer.

CNA Affected

[
  {
    "product": "Alpha5 Smart Loader",
    "vendor": "Fuji Electric",
    "versions": [
      {
        "status": "affected",
        "version": "3.7 and prior"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105411

ics-cert.us-cert.gov/advisories/ICSA-18-270-02