Integer overflow in Fuji Electric V-Server
Priority LOW 37CWE-190Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.
Summary
Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic.
Why it matters now
EPSS 0.0233 83rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Fuji Electric V-Server: 6.0.33.0
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Fuji Electric V-Server | before 6.0.33.0 | 6.0.33.0 | Patch available | CNA |
- Fuji Electric V-Server Vendor— Affected before 6.0.33.0 Fixed in 6.0.33.0 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:* | before 6.0.33.0 | Vulnerable | Fuji Electric |
- cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:* Versions before 6.0.33.0 Vulnerable ·Fuji Electric
Remediation
- Fix · CNA Fuji Electric V-Server Fixed in 6.0.33.0
Timeline
- 2026-10-02 Threatist record created from CVE-2019-3946
- 2026-10-03 Alias added: GHSA-4p44-cv6p-5gxp
References
More Fuji Electric V-server vulnerabilities
- TI-2019-13257 Heap-based buffer overflow in Fuji Electric V-Server 4.0.6 and prior CVSS 3.1CRITICAL 9.8
- TI-2019-02953 Insufficiently protected credentials in Fuji Electric V-Server CVSS 3.0CRITICAL 9.8
- TI-2021-05534 Heap-based buffer overflow in Tellus Lite V-Simulator and V-Server Lite CVSS 3.1HIGH 7.8
- TI-2021-05532 An uninitialized pointer issue has been identified in the way the application processes… CVSS 3.1HIGH 7.8
- TI-2021-05530 Stack-based buffer overflow in Tellus Lite V-Simulator and V-Server Lite CVSS 3.1HIGH 7.8
- TI-2018-07524 Buffer overflow in Fuji Electric V-Server Lite CVSS 3.0HIGH 7.8
Sources
- CVE-2019-3946 · CVE Program
- CVE-2019-3946 · NVD
- FIRST EPSS
- GHSA-4p44-cv6p-5gxp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences