CVE-2018-0651
Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2019-01-09
- Last modified
- 2024-08-05
- Weaknesses
- CWE-119
Affected products
- Astplanner (Yokogawa)
- Idefine For Prosafe-rs Firmware (Yokogawa)
- Stardom Fcn/fcj Simulator Firmware (Yokogawa)
- Stardom Versatile Data Server Firmware (Yokogawa)
- Trifellows (Yokogawa)
- The License Management Function Of Yokogawa Products (Yokogawa Electric Corporation)
References
- http://www.securityfocus.com/bid/105124
- https://jvn.jp/vu/JVNVU93845358/
- https://web-material3.yokogawa.com/YSAR-18-0006-E.pdf
