CVE-2018-14798 - OpenCVE

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Fujielectric	Frenic-ace Frenic-eco Frenic-mega Frenic-mini\(c1\) Frenic-mini\(c2\) Frenic-multi Frenic Loader 3.3 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:fujielectric:frenic_loader_3.3_firmware:7.3.4.1a:*:*:*:*:*:*:*

OR	cpe:2.3:h:fujielectric:frenic-ace:-:::::::*
	cpe:2.3:h:fujielectric:frenic-eco:-:::::::*
	cpe:2.3:h:fujielectric:frenic-mega:-:::::::*
	cpe:2.3:h:fujielectric:frenic-mini\(c1\):-:::::::*
	cpe:2.3:h:fujielectric:frenic-mini\(c2\):-:::::::*
	cpe:2.3:h:fujielectric:frenic-multi:-:::::::*

No data.

References

Link	Providers
http://www.securityfocus.com/bid/105408
https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03

History

No history.

MITRE

Status: PUBLISHED

Assigner: icscert

Published: 2018-10-01T13:00:00Z

Updated: 2024-09-16T23:41:07.456Z

Reserved: 2018-08-01T00:00:00

Link: CVE-2018-14798

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-10-01T13:29:00.690

Modified: 2019-10-09T23:35:13.843

Link: CVE-2018-14798

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace", "vendor": "Fuji Electric", "versions": [{"status": "affected", "version": "v3.3 v7.3.4.1a"}]}], "datePublic": "2018-09-27T00:00:00", "descriptions": [{"lang": "en", "value": "Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "OUT-OF-BOUNDS READ CWE-125", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-10-02T09:57:01", "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "shortName": "icscert"}, "references": [{"name": "105408", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/105408"}, {"tags": ["x_refsource_MISC"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "ics-cert@hq.dhs.gov", "DATE_PUBLIC": "2018-09-27T00:00:00", "ID": "CVE-2018-14798", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "FRENIC LOADER of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace", "version": {"version_data": [{"version_value": "v3.3 v7.3.4.1a"}]}}]}, "vendor_name": "Fuji Electric"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "OUT-OF-BOUNDS READ CWE-125"}]}]}, "references": {"reference_data": [{"name": "105408", "refsource": "BID", "url": "http://www.securityfocus.com/bid/105408"}, {"name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03", "refsource": "MISC", "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T09:38:13.975Z"}, "title": "CVE Program Container", "references": [{"name": "105408", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/105408"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03"}]}]}, "cveMetadata": {"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6", "assignerShortName": "icscert", "cveId": "CVE-2018-14798", "datePublished": "2018-10-01T13:00:00Z", "dateReserved": "2018-08-01T00:00:00", "dateUpdated": "2024-09-16T23:41:07.456Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fujielectric:frenic_loader_3.3_firmware:7.3.4.1a:*:*:*:*:*:*:*", "matchCriteriaId": "047DAA36-D21F-4563-8C57-9829048BBAA3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:fujielectric:frenic-ace:-:*:*:*:*:*:*:*", "matchCriteriaId": "E9D4C166-2E13-45FF-A2FD-410D36DE3DAF", "vulnerable": false}, {"criteria": "cpe:2.3:h:fujielectric:frenic-eco:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECB1557C-2F2E-41BF-B288-02694D7170CB", "vulnerable": false}, {"criteria": "cpe:2.3:h:fujielectric:frenic-mega:-:*:*:*:*:*:*:*", "matchCriteriaId": "B895CAB3-FE3A-4B4C-BC57-764D153461DF", "vulnerable": false}, {"criteria": "cpe:2.3:h:fujielectric:frenic-mini\\(c1\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "E4E0156F-6435-4DE6-97E0-E7E9D85621DD", "vulnerable": false}, {"criteria": "cpe:2.3:h:fujielectric:frenic-mini\\(c2\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "858682FA-3073-410B-9BE7-FFA77D9753C0", "vulnerable": false}, {"criteria": "cpe:2.3:h:fujielectric:frenic-multi:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA31A696-5425-47CB-84EB-527FEEA86CC9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The program does not properly parse FNC files that may allow for information disclosure."}, {"lang": "es", "value": "Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a de FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA y FRENIC-Ace. El programa no analiza correctamente los archivos FNC que podr\u00edan permitir una divulgaci\u00f3n de informaci\u00f3n."}], "id": "CVE-2018-14798", "lastModified": "2019-10-09T23:35:13.843", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-10-01T13:29:00.690", "references": [{"source": "ics-cert@hq.dhs.gov", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/105408"}, {"source": "ics-cert@hq.dhs.gov", "tags": ["Mitigation", "Third Party Advisory", "US Government Resource"], "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-270-03"}], "sourceIdentifier": "ics-cert@hq.dhs.gov", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "ics-cert@hq.dhs.gov", "type": "Secondary"}]}