Heap-Based Buffer Overflow Vulnerability in V-Server and V-Server Lite by Fujie Electric
CVE-2023-47586

7.8HIGH

Key Information:

Vendor

Fuji Electric Co., Ltd. And Hakko Electronics Co., Ltd.

Status
V-server
V-server Lite
Vendor
CVE Published:
15 November 2023

What is CVE-2023-47586?

Multiple heap-based buffer overflow vulnerabilities have been identified in V-Server versions prior to 4.0.18.0, as well as in V-Server Lite. When users open a specially crafted VPR file, these vulnerabilities could lead to the disclosure of sensitive information and the potential execution of arbitrary code, posing a significant risk to affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

V-Server V4.0.18.0 and earlier

V-Server Lite V4.0.18.0 and earlier

References

https://monitouch.fujielectric.com/site/download-e/03tell...
https://hakko-elec.co.jp/site/download/03tellus_inf/index...
https://jvn.jp/en/vu/JVNVU93840158/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.