Vulnerability in Fuji Electric Energy Savings Estimator
CVE-2018-14812
An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.
EPSS: 0.011 (62.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Fuji Electric Energy Savings Estimator — versions Versions V.1.0.2.0 and prior
- Fujielectric Energy_savings_estimator — versions 1.0.2.0
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-14812?
- CVE-2018-14812 is a high-severity vulnerability in Fuji Electric Energy Savings Estimator, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2018-10-24.
- How severe is CVE-2018-14812?
- High severity. CVSS v3 base score is 7.8 out of 10.