CVE-2022-1888

2022-08-3116:15:09

CWE-121

CWE-787

[email protected]

web.nvd.nist.gov

alpha7 pc loader

stack-based buffer overflow

arbitrary code execution

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

50.3%

JSON

Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code.

Affected configurations

Nvd

Node

fujielectricalpha7_pc_loaderMatch-

AND

fujielectricalpha7_pc_loader_firmware

VendorProductVersionCPE
fujielectricalpha7_pc_loader-cpe:2.3:h:fujielectric:alpha7_pc_loader:-:*:*:*:*:*:*:*
fujielectricalpha7_pc_loader_firmware*cpe:2.3:o:fujielectric:alpha7_pc_loader_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fujielectric	alpha7_pc_loader	-	cpe:2.3:h:fujielectric:alpha7_pc_loader:-:::::::*
fujielectric	alpha7_pc_loader_firmware	*	cpe:2.3:o:fujielectric:alpha7_pc_loader_firmware::::::::