CVEvulnerability
CVE-2018-0651
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2019-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors.
Affected configurations
• yokogawa idefine for prosafe-rs firmware (<= r1.16.3)
• yokogawa stardom versatile data server firmware (<= r7.50)
• yokogawa stardom fcn\/fcj simulator firmware (<= r4.20)
• yokogawa astplanner (<= r15.01)
• yokogawa trifellows (<= v5.04)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securityfocus.com/bid/105124 Third Party Advisory, VDB Entry
- https://jvn.jp/vu/JVNVU93845358/ Third Party Advisory
- https://web-material3.yokogawa.com/YSAR-18-0006-E.pdf Vendor Advisory
- http://www.securityfocus.com/bid/105124 Third Party Advisory, VDB Entry
- https://jvn.jp/vu/JVNVU93845358/ Third Party Advisory
- https://web-material3.yokogawa.com/YSAR-18-0006-E.pdf Vendor Advisory