Vulnerabilidades em Fuji Electric

65 resultados
Análise Vexday

Com 65 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, a Fuji Electric apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere pressão operacional relativamente reduzida no momento. A ausência de vulnerabilidades críticas e de provas de conceito públicas reforça esse perfil, embora não elimine o risco inerente ao portfólio. A falha mais comum é CWE-121 (stack-based buffer overflow), categoria que historicamente facilita execução arbitrária de código em sistemas de controle industrial — contexto típico dos produtos da fabricante. A CVE mais perigosa ativa hoje, CVE-2018-14790, registra EPSS de 0,0538, indicando probabilidade de exploração moderada nos próximos 30 dias e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente.

CVE-2018-14790—Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffeEPSS 5.4%CVE-2018-14823—Fuji Electric V-Server 4.0.3.0 and prior, A stack-based buffer overflow vulnerability has been identified, which may allow remote code execuEPSS 4.0%CVE-2018-14813—Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been identified, which may allow remote code executEPSS 3.9%CVE-2018-14819—Fuji Electric V-Server 4.0.3.0 and prior, An out-of-bounds read vulnerability has been identified, which may allow remote code execution.EPSS 3.6%CVE-2018-14802—Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The proEPSS 3.6%CVE-2018-14811—Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remotEPSS 3.6%CVE-2018-14817—Fuji Electric V-Server 4.0.3.0 and prior, An integer underflow vulnerability has been identified, which may allow remote code execution.EPSS 3.6%CVE-2018-14809—Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution.EPSS 2.7%CVE-2018-14794—Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before coEPSS 1.9%CVE-2018-10637—A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji EleEPSS 1.8%CVE-2018-14788—Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerability occurs when parsing certainEPSS 1.4%CVE-2018-14798—Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. The proEPSS 1.3%CVE-2022-21228HIGHICSA-22-090-03 Fuji Electric Alpha5EPSS 1.1%CVE-2018-14812—An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1EPSS 1.1%CVE-2020-25171—Fuji Electric V-Server LiteEPSS 1.0%CVE-2021-38413HIGHFuji Electric Tellus Lite V-Simulator stack based buffer overflowEPSS 1.0%CVE-2021-38415HIGHFuji Electric Tellus Lite V-Simulator heap based buffer overflowEPSS 1.0%CVE-2021-38401HIGHFuji Electric Tellus Lite V-Simulator untrusted pointer dereferenceEPSS 0.9%CVE-2022-21214HIGHICSA-22-090-03 Fuji Electric Alpha5EPSS 0.9%CVE-2021-38419HIGHFuji Electric Tellus Lite V-Simulator out of bounds writeEPSS 0.9%