Details of VAR-201911-1048

ID

VAR-201911-1048

CVE

CVE-2019-18240

TITLE

Fuji Electric V-Server VPR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Trust: 3.5

sources: ZDI: ZDI-19-968 // ZDI: ZDI-19-970 // ZDI: ZDI-19-967 // ZDI: ZDI-19-969 // ZDI: ZDI-19-971

DESCRIPTION

In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code. Fuji Electric V-Server Contains an out-of-bounds vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of VPR files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Fuji Electric V-Server is a set of software used by Fuji Electric to collect and manage real-time field data. A buffer overflow vulnerability exists in Fuji Electric V-Server 4.0.6 and earlier. This vulnerability is caused by a network system or product performing an operation on memory that does not properly validate data boundaries, causing an error to be performed on other associated memory locations. Read and write operations that an attacker can exploit to cause a buffer overflow or heap overflow

Trust: 5.49

sources: NVD: CVE-2019-18240 // JVNDB: JVNDB-2019-012000 // ZDI: ZDI-19-968 // ZDI: ZDI-19-970 // ZDI: ZDI-19-967 // ZDI: ZDI-19-969 // ZDI: ZDI-19-971 // CNVD: CNVD-2019-41427 // IVD: c161eb5b-3004-48c3-93e9-62ac80f32cd5

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: c161eb5b-3004-48c3-93e9-62ac80f32cd5 // CNVD: CNVD-2019-41427

AFFECTED PRODUCTS

vendor:	fuji electric	model:	v-server	scope:	-	version:	-	Trust: 3.5
vendor:	fujielectric	model:	v-server	scope:	lte	version:	4.0.6	Trust: 1.0
vendor:	fuji electric	model:	v-server	scope:	lte	version:	4.0.6	Trust: 0.8
vendor:	fuji	model:	electric v-server	scope:	lte	version:	<=4.0.6	Trust: 0.6
vendor:	v server	model:	-	scope:	eq	version:	*	Trust: 0.2

sources: IVD: c161eb5b-3004-48c3-93e9-62ac80f32cd5 // ZDI: ZDI-19-968 // ZDI: ZDI-19-970 // ZDI: ZDI-19-967 // ZDI: ZDI-19-969 // ZDI: ZDI-19-971 // CNVD: CNVD-2019-41427 // JVNDB: JVNDB-2019-012000 // NVD: CVE-2019-18240

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2019-18240
value:	HIGH
Trust: 3.5
nvd@nist.gov:	CVE-2019-18240
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2019-18240
value:	CRITICAL
Trust: 0.8
CNVD:	CNVD-2019-41427
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-201911-426
value:	CRITICAL
Trust: 0.6
IVD:	c161eb5b-3004-48c3-93e9-62ac80f32cd5
value:	CRITICAL
Trust: 0.2

nvd@nist.gov:	CVE-2019-18240
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-41427
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	c161eb5b-3004-48c3-93e9-62ac80f32cd5
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

ZDI:	CVE-2019-18240
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 3.5
nvd@nist.gov:	CVE-2019-18240
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2019-18240
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.8
problemtype:	CWE-122	Trust: 1.0

sources: JVNDB: JVNDB-2019-012000 // NVD: CVE-2019-18240

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201911-426

TYPE

Buffer error

Trust: 0.8

sources: IVD: c161eb5b-3004-48c3-93e9-62ac80f32cd5 // CNNVD: CNNVD-201911-426

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-012000

PATCH

title:	Fuji Electric has issued an update to correct this vulnerability.	url:	https://www.us-cert.gov/ics/advisories/icsa-19-311-02	Trust: 3.5
title:	Top Page	url:	https://www.fujielectric.com/index.html	Trust: 0.8
title:	Patch for Fuji Electric V-Server Buffer Overflow Vulnerability (CNVD-2019-41427)	url:	https://www.cnvd.org.cn/patchInfo/show/191105	Trust: 0.6
title:	Fuji Electric V-Server Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=103039	Trust: 0.6

sources: ZDI: ZDI-19-968 // ZDI: ZDI-19-970 // ZDI: ZDI-19-967 // ZDI: ZDI-19-969 // ZDI: ZDI-19-971 // CNVD: CNVD-2019-41427 // JVNDB: JVNDB-2019-012000 // CNNVD: CNNVD-201911-426

EXTERNAL IDS

db:	NVD	id:	CVE-2019-18240	Trust: 6.7
db:	ICS CERT	id:	ICSA-19-311-02	Trust: 3.0
db:	ZDI	id:	ZDI-19-971	Trust: 1.3
db:	AUSCERT	id:	ESB-2019.4210	Trust: 1.2
db:	CNVD	id:	CNVD-2019-41427	Trust: 0.8
db:	CNNVD	id:	CNNVD-201911-426	Trust: 0.8
db:	JVNDB	id:	JVNDB-2019-012000	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-8848	Trust: 0.7
db:	ZDI	id:	ZDI-19-968	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-8931	Trust: 0.7
db:	ZDI	id:	ZDI-19-970	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-8844	Trust: 0.7
db:	ZDI	id:	ZDI-19-967	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-8904	Trust: 0.7
db:	ZDI	id:	ZDI-19-969	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-8932	Trust: 0.7
db:	IVD	id:	C161EB5B-3004-48C3-93E9-62AC80F32CD5	Trust: 0.2

REFERENCES

url:	https://www.us-cert.gov/ics/advisories/icsa-19-311-02	Trust: 7.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-18240	Trust: 1.4
url:	https://www.auscert.org.au/bulletins/esb-2019.4210/	Trust: 1.2
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-18240	Trust: 0.8
url:	https://www.zerodayinitiative.com/advisories/zdi-19-971/	Trust: 0.6

CREDITS

kimiya of 9SG

Trust: 4.1

sources: ZDI: ZDI-19-968 // ZDI: ZDI-19-970 // ZDI: ZDI-19-967 // ZDI: ZDI-19-969 // ZDI: ZDI-19-971 // CNNVD: CNNVD-201911-426

SOURCES

db:	IVD	id:	c161eb5b-3004-48c3-93e9-62ac80f32cd5
db:	ZDI	id:	ZDI-19-968
db:	ZDI	id:	ZDI-19-970
db:	ZDI	id:	ZDI-19-967
db:	ZDI	id:	ZDI-19-969
db:	ZDI	id:	ZDI-19-971
db:	CNVD	id:	CNVD-2019-41427
db:	JVNDB	id:	JVNDB-2019-012000
db:	CNNVD	id:	CNNVD-201911-426
db:	NVD	id:	CVE-2019-18240

LAST UPDATE DATE

2024-11-23T22:29:50.428000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-19-968	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-970	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-967	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-969	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-971	date:	2019-11-11T00:00:00
db:	CNVD	id:	CNVD-2019-41427	date:	2019-11-20T00:00:00
db:	JVNDB	id:	JVNDB-2019-012000	date:	2019-11-22T00:00:00
db:	CNNVD	id:	CNNVD-201911-426	date:	2020-07-10T00:00:00
db:	NVD	id:	CVE-2019-18240	date:	2024-11-21T04:32:54.107

SOURCES RELEASE DATE

db:	IVD	id:	c161eb5b-3004-48c3-93e9-62ac80f32cd5	date:	2019-11-20T00:00:00
db:	ZDI	id:	ZDI-19-968	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-970	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-967	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-969	date:	2019-11-11T00:00:00
db:	ZDI	id:	ZDI-19-971	date:	2019-11-11T00:00:00
db:	CNVD	id:	CNVD-2019-41427	date:	2019-11-20T00:00:00
db:	JVNDB	id:	JVNDB-2019-012000	date:	2019-11-22T00:00:00
db:	CNNVD	id:	CNNVD-201911-426	date:	2019-11-07T00:00:00
db:	NVD	id:	CVE-2019-18240	date:	2019-11-13T23:15:11.433