Read the docs

Fuji Electric

Records152All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high130CVSS 7.0–8.9

Exploited now

Fuji Electric records in CISA KEV

No Fuji Electric vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

29 records in V-server · all components

Priority MEDIUM 57

In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13921 Published 2019-11-13 No fix listed CWE-122
Priority LOW 38

A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02155 Published 2021-01-27 Fixed in 4.0.10.0 CWE-122
Priority LOW 38

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Sim…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01939 Published 2021-01-27 Fixed in 4.0.10.0 CWE-824
Priority LOW 38

Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tel…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02235 Published 2021-01-27 Fixed in 4.0.10.0 CWE-121
Priority LOW 38

A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01849 Published 2018-09-13 No fix listed CWE-120
Priority LOW 37

Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01243 Published 2021-01-27 Fixed in 4.0.10.0 CWE-125
Priority LOW 37

Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01243 Published 2021-01-27 Fixed in 4.0.10.0 CWE-787
TI-2019-02952 CVE-2019-3946 · GHSA-4p44-cv6p-5gxp

Integer overflow in Fuji Electric V-Server

Priority LOW 37

Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0233 Published 2019-06-12 Fixed in 6.0.33.0 CWE-190
Priority LOW 36

Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2023-11-15 No fix listed CWE-787
TI-2023-25749 CVE-2023-47585 · GHSA-7xrr-3x3h-9hf4

Out-of-bounds read in Fuji Electric V-Server

Priority LOW 36

Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00265 Published 2023-11-15 No fix listed CWE-125
Priority LOW 36

Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00265 Published 2023-11-15 No fix listed CWE-787
Priority LOW 36

Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having user open a specially crafted VPR file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00266 Published 2023-06-19 No fix listed CWE-125
Priority LOW 36

Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00268 Published 2023-01-03 No fix listed CWE-787
Priority LOW 36

Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00238 Published 2023-01-03 No fix listed CWE-787
TI-2022-20041 CVE-2022-41645 · GHSA-gwc2-rv2r-58j4

Out-of-bounds read in Fuji Electric V-Server

Priority LOW 36

Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0024 Published 2023-01-03 No fix listed CWE-125
Priority LOW 36

Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00978 Published 2022-06-16 No fix listed CWE-125
Priority LOW 36

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00978 Published 2022-06-14 No fix listed CWE-787
TI-2022-11981 CVE-2022-29522 · GHSA-4m82-4qq2-89r3

Use after free in Fuji Electric V-SFT

Priority LOW 36

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00825 Published 2022-06-14 Fixed in v6.1.6.0 CWE-416
TI-2022-11966 CVE-2022-29506 · GHSA-5557-mc9g-j4mc

Out-of-bounds read in Fuji Electric V-SFT

Priority LOW 36

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a use…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00978 Published 2022-06-14 No fix listed CWE-125
Priority LOW 36

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0097 Published 2021-12-20 Fixed in 4.0.12.0 CWE-787
Priority LOW 36

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01036 Published 2021-12-20 Fixed in 4.0.12.0 CWE-122
Priority LOW 36

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01041 Published 2021-12-20 Fixed in 4.0.12.0 CWE-121
Priority LOW 36

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00975 Published 2021-12-20 Fixed in 4.0.12.0 CWE-822
Priority LOW 36

The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01151 Published 2021-02-19 Fixed in 3.3.24.0 CWE-787
Load more
Open these records in search →