Buffer overflow in Yokogawa Astplanner
CVE-2018-0651
Buffer overflow in the license management function of YOKOGAWA products (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier) allows remote attackers to stop the license management function or execute an arbitrary program via unspecified vectors.
Vulnerability class: Buffer Overflow
EPSS: 0.040 (89.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Yokogawa Astplanner
- Yokogawa Idefine_for_prosafe-rs
- Yokogawa Idefine_for_prosafe-rs_firmware
- Yokogawa Stardom_fcn\/fcj_simulator
- Yokogawa Stardom_fcn\/fcj_simulator_firmware
- Yokogawa Stardom_versatile_data_server
- Yokogawa Stardom_versatile_data_server_firmware
- Yokogawa Trifellows
- Yokogawa Electric Corporation The License Management Function Of Products — versions (iDefine for ProSafe-RS R1.16.3 and earlier, STARDOM VDS R7.50 and earlier, STARDOM FCN/FCJ Simulator R4.20 and earlier, ASTPLANNER R15.01 and earlier, TriFellows V5.04 and earlier)
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)
- vultures@jpcert.or.jp (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- vultures@jpcert.or.jp (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-0651?
- CVE-2018-0651 is a critical-severity vulnerability in Yokogawa Astplanner, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2019-01-09.
- How severe is CVE-2018-0651?
- Critical severity. CVSS v3 base score is 9.8 out of 10.