CVE-2023-47586

2023-11-1506:03:46

jpcert

www.cve.org

cve-2023-47586

heap-based buffer overflow

v-server

v-server lite

disclosure

arbitrary code execution

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

JSON

Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

CNA Affected

[
  {
    "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
    "product": "V-Server",
    "versions": [
      {
        "version": "V4.0.18.0 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
    "product": "V-Server Lite",
    "versions": [
      {
        "version": "V4.0.18.0 and earlier",
        "status": "affected"
      }
    ]
  }
]