CVE-2018-14802

CVE-2018-14802 affects Fuji Electric FRENIC Loader family (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace). Description: stack-based buffer overflow caused by improper validation of user-supplied comments, enabling arbitrary remote code execution. Affected product versions i...

CVE-2018-14794

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

CVE-2018-14790

CVE-2018-14790 concerns Fuji Electric FRENIC Loader devices (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) with firmware versions including v3.3 and v7.3.4.1a. The vulnerability is a buffer over-read in the device’s processing of FNC files, enabling remote code execution o...

CVE-2018-14798

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure...

CVE-2018-14790

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device...

CVE-2018-14794

The issue CVE-2018-14794 affects Fuji Electric Alpha5 Smart Loader, Versions 3.7 and prior. A heap-based buffer overflow occurs because the device does not check the length/size of a project file before copying its entire contents into a heap buffer, enabling possible remote code execution. The I...

CVE-2018-14788

CVE-2018-14788 affects Fuji Electric Alpha5 Smart Loader versions 3.7 and earlier. Root cause: classic buffer overflow (buffer copy without checking input size) during parsing of certain file types, causing information disclosure. CVSSv3 base score 5.3 (vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)...

CVE-2018-14798

CVE-2018-14798 affects Fuji Electric FRENIC Loader family (FRENIC-Mini C1/C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace) where the FNC file parsing logic incorrectly handles files, leading to information disclosure. The ICSA advisory confirms an out-of-bounds read vulnerability (CWE-125) ...

PT-2018-12722

Name of the Vulnerable Software and Affected Versions Fuji Electric Alpha5 Smart Loader versions 3.7 and prior Description A buffer overflow information disclosure issue occurs when parsing certain file types. Recommendations For Fuji Electric Alpha5 Smart Loader versions 3.7 and prior, update to...

CVE-2018-14794: Heap-based Buffer Overflow

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer...

PT-2018-12729

Name of the Vulnerable Software and Affected Versions Fuji Electric Alpha5 Smart Loader versions 3.7 and prior Description The issue arises because the device does not check the length or size of a project file before copying its entire contents to a heap-based buffer. Recommendations For Fuji...

PT-2018-12725

Name of the Vulnerable Software and Affected Versions Fuji Electric FRENIC LOADER version 3.3 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Mini C1 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Mini C2 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Eco Fuji Electric FREN...

CVE-2018-14790: Buffer Over-read

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device...

PT-2018-12737

Name of the Vulnerable Software and Affected Versions Fuji Electric FRENIC LOADER version 3.3 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Mini C1 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Mini C2 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Eco Fuji Electric FREN...

PT-2018-12732

Name of the Vulnerable Software and Affected Versions Fuji Electric FRENIC LOADER version 3.3 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Mini C1 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Mini C2 Fuji Electric FRENIC LOADER version 7.3.4.1a of FRENIC-Eco Fuji Electric FREN...

CVE-2018-14802: Stack-based Buffer Overflow

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly check user-supplied comments which may allow for arbitrary remote code execution...

CVE-2018-14798: Out-of-bounds Read

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini C1, FRENIC-Mini C2, FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure...

CVE-2018-14788: Buffer Copy without Checking Size of Input

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certain file types...

Buffer Overflow Vulnerability in Multiple Fuji Electric Products

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. A stack buffer overflow vulnerability exists in multiple Fuji Electric products, which stems from the program failing to properly detect user-submitted comments. A remote attacker could exploit the vulnerability to execute...

Multiple Fuji Electric Products Cross Boundary Read Vulnerability

Fuji Electric FRENIC Loader, etc. are inverters from Fuji Electric Japan. The out-of-bounds read vulnerability exists in multiple Fuji Electric products and stems from a program's failure to properly parse an FNC file, which can be exploited by an attacker to disclose information...