Vulnerability in Fuji Electric Energy Savings Estimator
CVE-2018-14812
An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings Estimator versions V.1.0.2.0 and prior. Exploitation of this vulnerability could give an attacker access to the system with the same level of privilege as the application that utilizes the malicious DLL.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (64.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 64th percentile — 64.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Fuji Electric Energy Savings Estimator — versions Versions V.1.0.2.0 and prior
- Fujielectric Energy Savings Estimator — versions 1.0.2.0
Weakness classification (CWE)
References
- ics-cert.us-cert.gov/advisories/ICSA-18-282-07 (US Government Resource, Third Party Advisory)
- www.securityfocus.com/bid/105543 (VDB Entry, Third Party Advisory, vdb-entry)
Frequently asked questions
- What is CVE-2018-14812?
- CVE-2018-14812 is a high-severity vulnerability in Fuji Electric Energy Savings Estimator, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2018-10-24.
- How severe is CVE-2018-14812?
- High severity. CVSS v3 base score is 7.8 out of 10.