PT-2018-12744

CVE-2018-14811

Publicado

2018-09-12

Atualizado

2019-10-09

Descrição por

CVSS 3.1

9.8

Crítica

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server versions 4.0.3.0 and prior

Description Multiple untrusted pointer dereference issues have been identified, which may allow remote code execution. The vulnerabilities are related to the VPR file parsing and CArchive read functions.

Recommendations For Fuji Electric V-Server versions 4.0.3.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impactos

Pesquisadores

Ghirmay Desta

Mr_Me

Steven Seeley

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-476: NULL Pointer Dereference

CWE-822: Untrusted Pointer Dereference

Identificadores relacionados

CVE-2018-14811