First published: Thu Sep 27 2018(Updated: )
Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow remote code execution on the device.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Fujielectric Frenic Loader 3.3 Firmware | =7.3.4.1a | |
Fujielectric Frenic-ace | ||
Fujielectric Frenic-eco | ||
Fujielectric Frenic-mega | ||
Fujielectric Frenic-mini(c1) | ||
Fujielectric Frenic-mini(c2) | ||
Fujielectric Frenic-multi |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-14790 is classified as a critical vulnerability due to its potential for remote code execution.
To mitigate CVE-2018-14790, update the affected Fujielectric FRENIC LOADER software to version 7.3.4.2 or later.
CVE-2018-14790 affects the Fujielectric FRENIC LOADER v3.3 version 7.3.4.1a and certain models of FRENIC series devices.
CVE-2018-14790 is a buffer over-read vulnerability that can potentially be exploited for remote code execution.
As of the latest updates, there have been no publicly reported cases of exploitation for CVE-2018-14790.