CVE-2018-14790: Critical severity Fujielectric Frenic Loader 3.3 Firmware vulnerability

Published Oct 1, 2018

Updated

Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device.

Affected Software

7 affected components

Fujielectric Frenic Loader 3.3 Firmware=7.3.4.1a

Fujielectric Frenic-ace

Fujielectric Frenic-eco

Fujielectric Frenic-mega

Fujielectric Frenic-mini\(c1\)

Fujielectric Frenic-mini\(c2\)

Fujielectric Frenic-multi

Event History

Oct 1, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-14790?

CVE-2018-14790 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2018-14790?

To mitigate CVE-2018-14790, update the affected Fujielectric FRENIC LOADER software to version 7.3.4.2 or later.

What devices are affected by CVE-2018-14790?

CVE-2018-14790 affects the Fujielectric FRENIC LOADER v3.3 version 7.3.4.1a and certain models of FRENIC series devices.

What is the nature of the vulnerability CVE-2018-14790?

CVE-2018-14790 is a buffer over-read vulnerability that can potentially be exploited for remote code execution.

Is CVE-2018-14790 being actively exploited?

As of the latest updates, there have been no publicly reported cases of exploitation for CVE-2018-14790.