CVE-2018-14790

CVE-2018-14790 concerns Fuji Electric FRENIC Loader devices (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) with firmware versions including v3.3 and v7.3.4.1a. The vulnerability is a buffer over-read in the device’s processing of FNC files, enabling remote code execution o...

CVE-2018-14798

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure...

CVE-2018-14798

CVE-2018-14798 affects Fuji Electric FRENIC Loader family (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) where the FNC file parsing logic incorrectly handles files, leading to information disclosure. The ICSA advisory confirms an out-of-bounds read vulnerability (CWE-125) ...

CVE-2018-14794

The issue CVE-2018-14794 affects Fuji Electric Alpha5 Smart Loader, Versions 3.7 and prior. A heap-based buffer overflow occurs because the device does not check the length/size of a project file before copying its entire contents into a heap buffer, enabling possible remote code execution. The I...

CVE-2018-14802

CVE-2018-14802 affects Fuji Electric FRENIC Loader family (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace). Description: stack-based buffer overflow caused by improper validation of user-supplied comments, enabling arbitrary remote code execution. Affected product versions i...

CVE-2018-14788

CVE-2018-14788 affects Fuji Electric Alpha5 Smart Loader versions 3.7 and earlier. Root cause: classic buffer overflow (buffer copy without checking input size) during parsing of certain file types, causing information disclosure. CVSSv3 base score 5.3 (vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)...

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

CVE-2018-14802

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution...

Fuji Electric Alpha5 Smart Loader Buffer Overflow Vulnerability (CNVD-2019-03308)

The Fuji Electric Alpha5 Smart Loader is a servo motor product from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric Alpha5 Smart Loader 3.7 and earlier versions, which can be exploited by an attacker to execute code due to the program failing to detect the...

Multiple Fuji Electric Products Cross Boundary Read Vulnerability

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. The out-of-bounds read vulnerability exists in multiple Fuji Electric products and stems from a program's failure to properly parse an FNC file, which can be exploited by an attacker to disclose information...

Buffer Overflow Vulnerability in Multiple Fuji Electric Products

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. A stack buffer overflow vulnerability exists in multiple Fuji Electric products, which stems from the program failing to properly detect user-submitted comments. A remote attacker could exploit the vulnerability to execute...

Multiple Fuji Electric Products Buffer Out-of-Bounds Read Vulnerability

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. A buffer out-of-bounds read vulnerability exists in multiple Fuji Electric products and can be exploited by remote attackers to execute code on the device...

Fuji Electric Alpha5 Smart Loader Buffer Overflow Vulnerability

The Fuji Electric Alpha5 Smart Loader is a servo motor product from Fuji Electric Japan. A buffer overflow vulnerability exists in Fuji Electric Alpha5 Smart Loader 3.7 and earlier versions, which can be exploited by an attacker to disclose information...

Fuji Electric FRENIC Devices (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low skill level to exploit/public exploits are available Vendor : Fuji Electric Equipment : FRENIC Loader, FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace Vulnerabilities : Buffer Over-read,...

(0Day) Fuji Electric Alpha5 Smart Loader C5V File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric Alpha Loader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Fuji Electric Frenic Loader FNC File Parsing Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fuji Electric Frenic Loader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) Fuji Electric Frenic Loader FNC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Fuji Electric Frenic Loader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

SharpSploit - A .NET Post-Exploitation Library Written In C#

SharpSploit is a .NET post-exploitation library written in C that aims to highlight the attack surface of .NET and make the use of offensive .NET easier for red teamers. SharpSploit is named, in part, as a homage to the PowerSploit project, a personal favorite of mine! While SharpSploit does port...

Linux/ARM - sigaction() Based Egghunter (PWN!) + execve Shellcode (52 Bytes)

/ Title: Linux/ARM - sigaction Based Egghunter PWN! + execve"/bin/sh", NULL, NULL Shellcode 52 Bytes Tested: armv7l Raspberry Pi 3 Model B+ Author: Ken Kitahara System Information pi@raspberrypi: $ uname -a Linux raspberrypi 4.14.52-v7+ 1123 SMP Wed Jun 27 17:35:49 BST 2018 armv7l GNU/Linux...

Linux/ARM - Egghunter (PWN!) + execve("/bin/sh", NULL, NULL) Shellcode (28 Bytes)

Linux/ARM - Egghunter PWN! + execve"/bin/sh", NULL, NULL Shellcode 28 Bytes. Shellcode exploit for ARM platform / Title: Linux/ARM - Egghunter PWN! + execve"/bin/sh", NULL, NULL Shellcode 28 Bytes Date: 2018-09-24 Tested: armv7l Raspberry Pi 3 Model B+ Author: Ken Kitahara System Information...