CVE Feed

    Dashboard / CVE / CVE-2018-14794

    CVE-2018-14794

    Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. The device does not perform a check on the length/size of a project file before copying the entire contents of the file to a heap-based buffer.

    Published:Oct 1, 2018
    Last Modified:Nov 21, 2024
    EPS:Oct 1, 2018
    EPSS Score:0.00665
    CVSS Score:9.8

    Affected Products

    Vendor
    Fujielectric
    Product
    Alpha5 Smart Loader
    Vendor
    Fujielectric
    Product
    Alpha5 Smart Loader Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-21202 (CVSS 3.3) — The affected product is vulnerable to an out-of-bounds read, which may result in disclosure of sensitive infor…
    CVE-2022-24383 (CVSS 7.8) — The affected product is vulnerable to an out-of-bounds read, which may result in code execution…
    CVE-2022-21228 (CVSS 7.8) — The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute ar…
    CVE-2022-21214 (CVSS 7.8) — The affected product is vulnerable to a heap-based buffer overflow, which may lead to code execution.…
    CVE-2022-21168 (CVSS 3.3) — The affected product is vulnerable due to an invalid pointer initialization, which may lead to information dis…
    CVE-2019-13520 (CVSS 7.8) — Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An att…
    CVE-2018-14788 (CVSS 5.3) — Fuji Electric Alpha5 Smart Loader Versions 3.7 and prior. A buffer overflow information disclosure vulnerabili…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High