Vulnerabilites related to FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. - V-Server Lite
cve-2023-47585
Vulnerability from cvelistv5
Published
2023-11-15 06:03
Modified
2024-08-29 15:13
Severity ?
EPSS score ?
Summary
Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ▼ | FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. | V-Server |
Version: V4.0.18.0 and earlier |
||||||
|
|||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T21:09:37.505Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { tags: [ "x_transferred", ], url: "https://hakko-elec.co.jp/site/download/03tellus_inf/index.php", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU93840158/", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:fujielectric:v-server_lite:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "v-server_lite", vendor: "fujielectric", versions: [ { lessThan: "V4.0.18.0", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-47585", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-08-29T15:11:07.366451Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-08-29T15:13:49.252Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "V-Server", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "V4.0.18.0 and earlier", }, ], }, { product: "V-Server Lite", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "V4.0.18.0 and earlier", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.", }, ], problemTypes: [ { descriptions: [ { description: "Out-of-bounds read", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-11-15T06:03:31.138Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { url: "https://hakko-elec.co.jp/site/download/03tellus_inf/index.php", }, { url: "https://jvn.jp/en/vu/JVNVU93840158/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-47585", datePublished: "2023-11-15T06:03:31.138Z", dateReserved: "2023-11-07T02:41:20.173Z", dateUpdated: "2024-08-29T15:13:49.252Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2024-38658
Vulnerability from cvelistv5
Published
2024-11-28 02:11
Modified
2024-11-29 20:46
Severity ?
EPSS score ?
Summary
There is an Out-of-bounds read vulnerability in V-Server (v4.0.19.0 and earlier) and V-Server Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ▼ | FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. | V-Server |
Version: v4.0.19.0 and earlier |
||||||
|
|||||||||
{ containers: { adp: [ { affected: [ { cpes: [ "cpe:2.3:a:fujielectric:v-server_lite:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "v-server_lite", vendor: "fujielectric", versions: [ { lessThanOrEqual: "4.0.19.0", status: "affected", version: "0", versionType: "custom", }, ], }, { cpes: [ "cpe:2.3:a:fujielectric:v-server:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "v-server", vendor: "fujielectric", versions: [ { lessThanOrEqual: "4.0.19.0", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { cvssV3_1: { attackComplexity: "LOW", attackVector: "LOCAL", availabilityImpact: "HIGH", baseScore: 7.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.1", }, }, { other: { content: { id: "CVE-2024-38658", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-11-29T20:39:25.311513Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-11-29T20:46:17.613Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "V-Server", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "v4.0.19.0 and earlier", }, ], }, { product: "V-Server Lite", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "v4.0.19.0 and earlier", }, ], }, ], descriptions: [ { lang: "en", value: "There is an Out-of-bounds read vulnerability in V-Server (v4.0.19.0 and earlier) and V-Server Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.", }, ], problemTypes: [ { descriptions: [ { cweId: "CWE-125", description: "Out-of-bounds read", lang: "en-US", type: "CWE", }, ], }, ], providerMetadata: { dateUpdated: "2024-11-28T02:11:21.840Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { url: "https://jvn.jp/en/vu/JVNVU97531313/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2024-38658", datePublished: "2024-11-28T02:11:21.840Z", dateReserved: "2024-06-19T15:02:01.369Z", dateUpdated: "2024-11-29T20:46:17.613Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-47586
Vulnerability from cvelistv5
Published
2023-11-15 06:03
Modified
2024-08-29 17:50
Severity ?
EPSS score ?
Summary
Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ▼ | FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. | V-Server |
Version: V4.0.18.0 and earlier |
||||||
|
|||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T21:09:37.352Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { tags: [ "x_transferred", ], url: "https://hakko-elec.co.jp/site/download/03tellus_inf/index.php", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU93840158/", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:fujielectric:v-server_lite:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "v-server_lite", vendor: "fujielectric", versions: [ { lessThan: "V4.0.18.0", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-47586", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-08-29T17:48:25.083109Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-08-29T17:50:00.621Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "V-Server", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "V4.0.18.0 and earlier", }, ], }, { product: "V-Server Lite", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "V4.0.18.0 and earlier", }, ], }, ], descriptions: [ { lang: "en", value: "Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.", }, ], problemTypes: [ { descriptions: [ { description: "Heap-based buffer overflow", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-11-15T06:03:46.888Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { url: "https://hakko-elec.co.jp/site/download/03tellus_inf/index.php", }, { url: "https://jvn.jp/en/vu/JVNVU93840158/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-47586", datePublished: "2023-11-15T06:03:46.888Z", dateReserved: "2023-11-07T02:41:20.173Z", dateUpdated: "2024-08-29T17:50:00.621Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
cve-2023-47584
Vulnerability from cvelistv5
Published
2023-11-15 06:03
Modified
2024-08-29 15:15
Severity ?
EPSS score ?
Summary
Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| ▼ | FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. | V-Server |
Version: V4.0.18.0 and earlier |
||||||
|
|||||||||
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-02T21:09:37.423Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_transferred", ], url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { tags: [ "x_transferred", ], url: "https://hakko-elec.co.jp/site/download/03tellus_inf/index.php", }, { tags: [ "x_transferred", ], url: "https://jvn.jp/en/vu/JVNVU93840158/", }, ], title: "CVE Program Container", }, { affected: [ { cpes: [ "cpe:2.3:a:fujielectric:v-server_lite:*:*:*:*:*:*:*:*", ], defaultStatus: "unknown", product: "v-server_lite", vendor: "fujielectric", versions: [ { lessThan: "V4.0.18.0", status: "affected", version: "0", versionType: "custom", }, ], }, ], metrics: [ { other: { content: { id: "CVE-2023-47584", options: [ { Exploitation: "none", }, { Automatable: "no", }, { "Technical Impact": "total", }, ], role: "CISA Coordinator", timestamp: "2024-08-29T15:14:50.816482Z", version: "2.0.3", }, type: "ssvc", }, }, ], providerMetadata: { dateUpdated: "2024-08-29T15:15:45.277Z", orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0", shortName: "CISA-ADP", }, title: "CISA ADP Vulnrichment", }, ], cna: { affected: [ { product: "V-Server", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "V4.0.18.0 and earlier", }, ], }, { product: "V-Server Lite", vendor: "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.", versions: [ { status: "affected", version: "V4.0.18.0 and earlier", }, ], }, ], descriptions: [ { lang: "en", value: "Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.\r\n", }, ], problemTypes: [ { descriptions: [ { description: "Out-of-bounds write", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-11-15T06:03:19.425Z", orgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", shortName: "jpcert", }, references: [ { url: "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php", }, { url: "https://hakko-elec.co.jp/site/download/03tellus_inf/index.php", }, { url: "https://jvn.jp/en/vu/JVNVU93840158/", }, ], }, }, cveMetadata: { assignerOrgId: "ede6fdc4-6654-4307-a26d-3331c018e2ce", assignerShortName: "jpcert", cveId: "CVE-2023-47584", datePublished: "2023-11-15T06:03:19.425Z", dateReserved: "2023-11-07T02:41:20.173Z", dateUpdated: "2024-08-29T15:15:45.277Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }