Fuji Electric V-Server

🗓️ 11 Sep 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 507 Views

Fuji Electric V-Server, with versions 4.0.3.0 and prior, is prone to multiple vulnerabilities including use after free, untrusted pointer dereference, heap-based buffer overflow, out-of-bounds write, integer underflow, out-of-bounds read, and stack-based buffer overflow, which may lead to remote code execution, denial of service, or information exposure. Mitigations involve updating to Version 4.0.4.0 and implementing defensive network measures

Reporter	Title	Published	Views	Family All 58
CNVD	Fuji Electric V-Server Buffer Overflow Vulnerability	18 Sep 201800:00	–	cnvd
CNVD	Fuji Electric V-Server VPR Memory Misreference Vulnerability	25 Sep 201800:00	–	cnvd
CNVD	Fuji Electric V-Server Buffer Overflow Vulnerability	18 Sep 201800:00	–	cnvd
CNVD	Fuji Electric V-Server Out-of-Bounds Read Vulnerability	18 Sep 201800:00	–	cnvd
CNVD	Fuji Electric V-Server Integer Overflow Vulnerability	18 Sep 201800:00	–	cnvd
CNVD	Fuji Electric V-Server Out-of-Bounds Write Vulnerability	18 Sep 201800:00	–	cnvd
CNVD	Fuji Electric V-Server Post-Release Reuse Vulnerability	18 Sep 201800:00	–	cnvd
CVE	CVE-2018-14809	26 Sep 201820:00	–	cve
CVE	CVE-2018-14811	26 Sep 201820:00	–	cve
CVE	CVE-2018-14813	26 Sep 201820:00	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-254-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-18-254-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

11 Sep 2018 00:00Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 39.8

CVSS 3.19.8

EPSS0.04449