Vulnerability · Published Jun 14, 2022 · Assigned by jpcert
CVE-2022-29524
High 7.8
In plain English
A high-severity security flaw in V-Server and V-Server Lite from FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)1.0%top 37.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. | V-Server and V-Server Lite | V-Server v4.0.11.0 and earlier, and V-Server Lite v4.0.13.0 and earlier |
References
- https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php x_refsource_MISC
- https://monitouch.fujielectric.com/site/download-eu/03tellus_inf/index.php x_refsource_MISC
- https://jvn.jp/en/vu/JVNVU93134398/index.html x_refsource_MISC