CVE-2018-14794

CRITICAL

Fuji Electric Alpha5 Smart Loader <3.7 - Buffer Overflow

Title source: llm

Description

Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/105411

Mitigation, Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-18-270-02

Scores

CVSS v3 9.8

EPSS 0.0063

EPSS Percentile 70.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119 CWE-122

Status published

Products (1)

fujielectric/alpha5_smart_loader_firmware < 3.7

Published Oct 01, 2018

Tracked Since Feb 18, 2026