Vulnerability Details CVE-2019-13520
Multiple buffer overflow issues have been identified in Alpha5 Smart Loader: All versions prior to 4.2. An attacker could use specially crafted project files to overflow the buffer and execute code under the privileges of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
- https://www.us-cert.gov/ics/advisories/icsa-19-227-02
- https://www.zerodayinitiative.com/advisories/ZDI-19-798/
- https://www.zerodayinitiative.com/advisories/ZDI-19-820/
- https://www.us-cert.gov/ics/advisories/icsa-19-227-02
- https://www.zerodayinitiative.com/advisories/ZDI-19-798/
- https://www.zerodayinitiative.com/advisories/ZDI-19-820/
Products affected by CVE-2019-13520
-
cpe:2.3:h:fujielectric:alpha5_smart_loader:-
-
cpe:2.3:o:fujielectric:alpha5_smart_loader_firmware:3.7