var-201911-1048
Vulnerability from variot

In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code. Fuji Electric V-Server Contains an out-of-bounds vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of VPR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Fuji Electric V-Server is a set of software used by Fuji Electric to collect and manage real-time field data.

A buffer overflow vulnerability exists in Fuji Electric V-Server 4.0.6 and earlier. This vulnerability is caused by a network system or product performing an operation on memory that does not properly validate data boundaries, causing an error to be performed on other associated memory locations. Read and write operations that an attacker can exploit to cause a buffer overflow or heap overflow

Show details on source website

To clipboard 

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "v-server",
        "scope": null,
        "trust": 3.5,
        "vendor": "fuji electric",
        "version": null
      },
      {
        "_id": null,
        "model": "v-server",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "fujielectric",
        "version": "4.0.6"
      },
      {
        "_id": null,
        "model": "v-server",
        "scope": "lte",
        "trust": 0.8,
        "vendor": "fuji electric",
        "version": "4.0.6"
      },
      {
        "_id": null,
        "model": "electric v-server",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "fuji",
        "version": "\u003c=4.0.6"
      },
      {
        "_id": null,
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "v server",
        "version": "*"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18240"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:fujielectric:v-server",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "kimiya of 9SG",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      }
    ],
    "trust": 4.1
  },
  "cve": "CVE-2019-18240",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CVE-2019-18240",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2019-41427",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 10.0,
            "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "ZDI",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2019-18240",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 3.5,
            "userInteraction": "REQUIRED",
            "vectorString": "AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2019-18240",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2019-18240",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "ZDI",
            "id": "CVE-2019-18240",
            "trust": 3.5,
            "value": "HIGH"
          },
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2019-18240",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2019-18240",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2019-41427",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201911-426",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "IVD",
            "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5",
            "trust": 0.2,
            "value": "CRITICAL"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18240"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code. Fuji Electric V-Server Contains an out-of-bounds vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state.  User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of VPR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer.  An attacker can leverage this vulnerability to execute code in the context of the current process. Fuji Electric V-Server is a set of software used by Fuji Electric to collect and manage real-time field data. \n\nA buffer overflow vulnerability exists in Fuji Electric V-Server 4.0.6 and earlier. This vulnerability is caused by a network system or product performing an operation on memory that does not properly validate data boundaries, causing an error to be performed on other associated memory locations. Read and write operations that an attacker can exploit to cause a buffer overflow or heap overflow",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2019-18240"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      },
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      }
    ],
    "trust": 5.49
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2019-18240",
        "trust": 6.7
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-19-311-02",
        "trust": 3.0
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971",
        "trust": 1.3
      },
      {
        "db": "AUSCERT",
        "id": "ESB-2019.4210",
        "trust": 1.2
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-8848",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-968",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-8931",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-8844",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-8904",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-8932",
        "trust": 0.7
      },
      {
        "db": "IVD",
        "id": "C161EB5B-3004-48C3-93E9-62AC80F32CD5",
        "trust": 0.2
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18240"
      }
    ]
  },
  "id": "VAR-201911-1048",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      }
    ],
    "trust": 1.67058824
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      }
    ]
  },
  "last_update_date": "2024-11-23T22:29:50.428000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "Fuji Electric has issued an update to correct this vulnerability.",
        "trust": 3.5,
        "url": "https://www.us-cert.gov/ics/advisories/icsa-19-311-02"
      },
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "https://www.fujielectric.com/index.html"
      },
      {
        "title": "Patch for Fuji Electric V-Server Buffer Overflow Vulnerability (CNVD-2019-41427)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/191105"
      },
      {
        "title": "Fuji Electric V-Server Buffer error vulnerability fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=103039"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-787",
        "trust": 1.8
      },
      {
        "problemtype": "CWE-122",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18240"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 7.1,
        "url": "https://www.us-cert.gov/ics/advisories/icsa-19-311-02"
      },
      {
        "trust": 1.4,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2019-18240"
      },
      {
        "trust": 1.2,
        "url": "https://www.auscert.org.au/bulletins/esb-2019.4210/"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-18240"
      },
      {
        "trust": 0.6,
        "url": "https://www.zerodayinitiative.com/advisories/zdi-19-971/"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18240"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-968",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969",
        "ident": null
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971",
        "ident": null
      },
      {
        "db": "CNVD",
        "id": "CNVD-2019-41427",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2019-012000",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2019-18240",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-11-20T00:00:00",
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-968",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-970",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-967",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-969",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-971",
        "ident": null
      },
      {
        "date": "2019-11-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-41427",
        "ident": null
      },
      {
        "date": "2019-11-22T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012000",
        "ident": null
      },
      {
        "date": "2019-11-07T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-426",
        "ident": null
      },
      {
        "date": "2019-11-13T23:15:11.433000",
        "db": "NVD",
        "id": "CVE-2019-18240",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-968",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-970",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-967",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-969",
        "ident": null
      },
      {
        "date": "2019-11-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-19-971",
        "ident": null
      },
      {
        "date": "2019-11-20T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2019-41427",
        "ident": null
      },
      {
        "date": "2019-11-22T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2019-012000",
        "ident": null
      },
      {
        "date": "2020-07-10T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201911-426",
        "ident": null
      },
      {
        "date": "2024-11-21T04:32:54.107000",
        "db": "NVD",
        "id": "CVE-2019-18240",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "Fuji Electric V-Server VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-19-968"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-970"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-967"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-969"
      },
      {
        "db": "ZDI",
        "id": "ZDI-19-971"
      }
    ],
    "trust": 3.5
  },
  "type": {
    "_id": null,
    "data": "Buffer error",
    "sources": [
      {
        "db": "IVD",
        "id": "c161eb5b-3004-48c3-93e9-62ac80f32cd5"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201911-426"
      }
    ],
    "trust": 0.8
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.