Lucene search

[email protected]CVE-2018-0651

HistoryJan 09, 2019 - 11:29 p.m.

CVE-2018-0651

2019-01-0923:29:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2018-0651

yokogawa

buffer overflow

license management

remote attack

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

JSON

Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors.

Affected configurations

NVD

Node

yokogawaidefine_for_prosafe-rsMatch-

AND

yokogawaidefine_for_prosafe-rs_firmwareRange≤r1.16.3

Node

yokogawastardom_versatile_data_serverMatch-

AND

yokogawastardom_versatile_data_server_firmwareRange≤r7.50

Node

yokogawastardom_fcn\/fcj_simulatorMatch-

AND

yokogawastardom_fcn\/fcj_simulator_firmwareRange≤r4.20

Node

yokogawaastplannerRange≤r15.01

Node

yokogawatrifellowsRange≤v5.04

CPENameOperatorVersion
yokogawa:idefine_for_prosafe-rs_firmwareyokogawa idefine for prosafe-rs firmwareler1.16.3

CPE	Name	Operator	Version
yokogawa:idefine_for_prosafe-rs_firmware	yokogawa idefine for prosafe-rs firmware	le	r1.16.3

CNA Affected

[
  {
    "product": "The license management function of YOKOGAWA products",
    "vendor": "Yokogawa Electric Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "(iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier)"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105124

jvn.jp/vu/JVNVU93845358/

web-material3.yokogawa.com/YSAR-18-0006-E.pdf

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

JSON

Related for CVE-2018-0651

ics1 prion1 nvd1 nessus2 cvelist1