Heap-Based Buffer Overflow in Fuji Electric Alpha5 Smart Loader
CVE-2018-14794

9.8CRITICAL

Key Information:

Vendor

Fuji Electric

Status
Alpha5 Smart Loader
Vendor
CVE Published:
1 October 2018

What is CVE-2018-14794?

Fuji Electric Alpha5 Smart Loader Versions 3.7 and earlier are susceptible to a heap-based buffer overflow. This vulnerability arises due to the device's failure to validate the length of project files before copying their contents into a heap-based buffer. An attacker could potentially exploit this oversight to execute arbitrary code or disrupt the normal operation of the device, thereby posing significant risks to the system's integrity.

Affected Version(s)

Alpha5 Smart Loader 3.7 and prior

References

http://www.securityfocus.com/bid/105411
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-02
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.