CVE-2018-14790
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
81.6%
Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| fujielectric | frenic_loader_3.3_firmware | 7.3.4.1a | cpe:2.3:o:fujielectric:frenic_loader_3.3_firmware:7.3.4.1a:*:*:*:*:*:*:* |
| fujielectric | frenic-ace | - | cpe:2.3:h:fujielectric:frenic-ace:-:*:*:*:*:*:*:* |
| fujielectric | frenic-eco | - | cpe:2.3:h:fujielectric:frenic-eco:-:*:*:*:*:*:*:* |
| fujielectric | frenic-mega | - | cpe:2.3:h:fujielectric:frenic-mega:-:*:*:*:*:*:*:* |
| fujielectric | frenic-mini\(c1\) | - | cpe:2.3:h:fujielectric:frenic-mini\(c1\):-:*:*:*:*:*:*:* |
| fujielectric | frenic-mini\(c2\) | - | cpe:2.3:h:fujielectric:frenic-mini\(c2\):-:*:*:*:*:*:*:* |
| fujielectric | frenic-multi | - | cpe:2.3:h:fujielectric:frenic-multi:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
81.6%