Details of VAR-201809-0151

ID

VAR-201809-0151

CVE

CVE-2018-14811

TITLE

Fuji Electric V-Server VPR File Parsing CArchive Read Untrusted Pointer Dereference Remote Code Execution Vulnerability

Trust: 2.1

sources: ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1021

DESCRIPTION

Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of a VPR file. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code under the context of the process. Fuji Electric V-Server VPR is a data collection software from Fuji Electric of Japan. Fuji Electric V-Server is prone to multiple security vulnerabilities: 1. A use-after-free vulnerability 2. A heap-based buffer overflow vulnerability 4. Multiple out-of-bounds write vulnerabilities 5. An integer underflow vulnerability 6. An out-of-bounds read vulnerability 7. V-Server 4.0.3.0 and prior are vulnerable

Trust: 5.85

sources: NVD: CVE-2018-14811 // JVNDB: JVNDB-2018-010414 // ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021 // CNVD: CNVD-2019-03306 // BID: 105341 // IVD: 7d85de80-463f-11e9-8522-000c29342cb1 // VULHUB: VHN-125008

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 7d85de80-463f-11e9-8522-000c29342cb1 // CNVD: CNVD-2019-03306

AFFECTED PRODUCTS

vendor:	fuji electric	model:	v-server	scope:	-	version:	-	Trust: 3.5
vendor:	fujielectric	model:	v-server	scope:	lte	version:	4.0.3.0	Trust: 1.0
vendor:	fuji electric	model:	v-server	scope:	lte	version:	4.0.3.0	Trust: 0.8
vendor:	fuji	model:	electric v-server vpr	scope:	lte	version:	<=4.0.3.0	Trust: 0.6
vendor:	fujielectric	model:	v-server	scope:	eq	version:	4.0.3.0	Trust: 0.6
vendor:	fuji	model:	electric v-server	scope:	eq	version:	4.0.3.0	Trust: 0.3
vendor:	fuji	model:	electric v-server	scope:	eq	version:	4.0.1.0	Trust: 0.3
vendor:	fuji	model:	electric v-server	scope:	eq	version:	4.0.0.0	Trust: 0.3
vendor:	fuji	model:	electric v-server	scope:	eq	version:	3.3.22.0	Trust: 0.3
vendor:	fuji	model:	electric v-server	scope:	ne	version:	4.0.4.0	Trust: 0.3
vendor:	v server	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: 7d85de80-463f-11e9-8522-000c29342cb1 // ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021 // CNVD: CNVD-2019-03306 // BID: 105341 // JVNDB: JVNDB-2018-010414 // CNNVD: CNNVD-201809-577 // NVD: CVE-2018-14811

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2018-14811
value:	MEDIUM
Trust: 3.5
nvd@nist.gov:	CVE-2018-14811
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2018-14811
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2019-03306
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201809-577
value:	CRITICAL
Trust: 0.6
IVD:	7d85de80-463f-11e9-8522-000c29342cb1
value:	CRITICAL
Trust: 0.2
VULHUB:	VHN-125008
value:	HIGH
Trust: 0.1

ZDI:	CVE-2018-14811
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 3.5
nvd@nist.gov:	CVE-2018-14811
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-03306
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	7d85de80-463f-11e9-8522-000c29342cb1
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2
VULHUB:	VHN-125008
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-14811
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: IVD: 7d85de80-463f-11e9-8522-000c29342cb1 // ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021 // CNVD: CNVD-2019-03306 // VULHUB: VHN-125008 // JVNDB: JVNDB-2018-010414 // CNNVD: CNNVD-201809-577 // NVD: CVE-2018-14811

PROBLEMTYPE DATA

problemtype:	CWE-476	Trust: 1.9
problemtype:	CWE-822	Trust: 1.0

sources: VULHUB: VHN-125008 // JVNDB: JVNDB-2018-010414 // NVD: CVE-2018-14811

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201809-577

TYPE

Code problem

Trust: 0.8

sources: IVD: 7d85de80-463f-11e9-8522-000c29342cb1 // CNNVD: CNNVD-201809-577

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-010414

PATCH

title:	Fuji Electric has issued an update to correct this vulnerability.	url:	https://ics-cert.us-cert.gov/advisories/ICSA-18-254-01	Trust: 3.5
title:	トップページ	url:	https://www.fujielectric.co.jp/	Trust: 0.8
title:	Fuji Electric V-Server releases patches for reusing vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/152185	Trust: 0.6
title:	Fuji Electric V-Server VPR Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=84844	Trust: 0.6

sources: ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021 // CNVD: CNVD-2019-03306 // JVNDB: JVNDB-2018-010414 // CNNVD: CNNVD-201809-577

EXTERNAL IDS

db:	NVD	id:	CVE-2018-14811	Trust: 7.1
db:	ICS CERT	id:	ICSA-18-254-01	Trust: 2.8
db:	BID	id:	105341	Trust: 2.6
db:	CNNVD	id:	CNNVD-201809-577	Trust: 0.9
db:	CNVD	id:	CNVD-2019-03306	Trust: 0.8
db:	JVNDB	id:	JVNDB-2018-010414	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-5880	Trust: 0.7
db:	ZDI	id:	ZDI-18-1014	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-5878	Trust: 0.7
db:	ZDI	id:	ZDI-18-1011	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-5886	Trust: 0.7
db:	ZDI	id:	ZDI-18-1020	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-5888	Trust: 0.7
db:	ZDI	id:	ZDI-18-1022	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-5887	Trust: 0.7
db:	ZDI	id:	ZDI-18-1021	Trust: 0.7
db:	IVD	id:	7D85DE80-463F-11E9-8522-000C29342CB1	Trust: 0.2
db:	VULHUB	id:	VHN-125008	Trust: 0.1

sources: IVD: 7d85de80-463f-11e9-8522-000c29342cb1 // ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021 // CNVD: CNVD-2019-03306 // VULHUB: VHN-125008 // BID: 105341 // JVNDB: JVNDB-2018-010414 // CNNVD: CNNVD-201809-577 // NVD: CVE-2018-14811

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-18-254-01	Trust: 6.3
url:	http://www.securityfocus.com/bid/105341	Trust: 2.3
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-14811	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-14811	Trust: 0.8
url:	http://www.fujielectric.com/	Trust: 0.3

sources: ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021 // CNVD: CNVD-2019-03306 // VULHUB: VHN-125008 // BID: 105341 // JVNDB: JVNDB-2018-010414 // CNNVD: CNNVD-201809-577 // NVD: CVE-2018-14811

CREDITS

Steven Seeley (mr_me) of Source Incite

Trust: 3.5

sources: ZDI: ZDI-18-1014 // ZDI: ZDI-18-1011 // ZDI: ZDI-18-1020 // ZDI: ZDI-18-1022 // ZDI: ZDI-18-1021

SOURCES

db:	IVD	id:	7d85de80-463f-11e9-8522-000c29342cb1
db:	ZDI	id:	ZDI-18-1014
db:	ZDI	id:	ZDI-18-1011
db:	ZDI	id:	ZDI-18-1020
db:	ZDI	id:	ZDI-18-1022
db:	ZDI	id:	ZDI-18-1021
db:	CNVD	id:	CNVD-2019-03306
db:	VULHUB	id:	VHN-125008
db:	BID	id:	105341
db:	JVNDB	id:	JVNDB-2018-010414
db:	CNNVD	id:	CNNVD-201809-577
db:	NVD	id:	CVE-2018-14811

LAST UPDATE DATE

2024-11-23T21:38:23.937000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-18-1014	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1011	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1020	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1022	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1021	date:	2018-09-12T00:00:00
db:	CNVD	id:	CNVD-2019-03306	date:	2019-01-30T00:00:00
db:	VULHUB	id:	VHN-125008	date:	2019-10-09T00:00:00
db:	BID	id:	105341	date:	2018-09-11T00:00:00
db:	JVNDB	id:	JVNDB-2018-010414	date:	2018-12-13T00:00:00
db:	CNNVD	id:	CNNVD-201809-577	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-14811	date:	2024-11-21T03:49:50.773

SOURCES RELEASE DATE

db:	IVD	id:	7d85de80-463f-11e9-8522-000c29342cb1	date:	2019-01-30T00:00:00
db:	ZDI	id:	ZDI-18-1014	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1011	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1020	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1022	date:	2018-09-12T00:00:00
db:	ZDI	id:	ZDI-18-1021	date:	2018-09-12T00:00:00
db:	CNVD	id:	CNVD-2019-03306	date:	2019-01-30T00:00:00
db:	VULHUB	id:	VHN-125008	date:	2018-09-26T00:00:00
db:	BID	id:	105341	date:	2018-09-11T00:00:00
db:	JVNDB	id:	JVNDB-2018-010414	date:	2018-12-13T00:00:00
db:	CNNVD	id:	CNNVD-201809-577	date:	2018-09-13T00:00:00
db:	NVD	id:	CVE-2018-14811	date:	2018-09-26T20:29:00.403