Fuji Electric V-Server Lite
view advisory published 2020-04-07
Successful exploitation of this vulnerability could allow a remote attacker to gain elevated privileges for remote code execution.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10646US | high7.8 | — | ||
Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationV-Server Lite
Fuji Electric has released Version 4.0.9.0 to mitigate the reported vulnerability. The new version can be obtained at the Fuji Electric Library website.
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ffelib.fujielectric.co.jp%2Fdownload%2Fpod_document.htm%3Fproduct1_id%3DP10003%26product2_id%3DP20023%26product3_id%3DP30262%26material1_id%3DM10009%26site%3Dglobal%26lang%3Den&data=02%7C01%7Cjason.barkley%40inl.gov%7C400827e69171409a473308d7d9c007b6%7C4cf464b7869a42368da2a98566485554%7C0%7C0%7C637217291107598722&sdata=Dn%2BJY0j8E8AG3oZSVKgFQKkhDEBLzidAm%2FdnesysiFE%3D&reserved=0
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan