ID
VAR-202311-0454
CVE
CVE-2023-47586
TITLE
Fuji Electric's V-Server Out-of-bounds write vulnerability in
Trust: 0.8
DESCRIPTION
Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed. Fuji Electric's V-Server Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Fuji Electric V-Server and Fuji Electric V-Server Lite are both products of Fuji Electric Corporation of Japan. Fuji Electric V-Server is a set of software for collecting and managing real-time field data. Fuji Electric V-Server Lite is a remote monitoring software for industrial environments. The software can collect information from devices such as PLCs, temperature controllers, inverters, etc. Fuji Electric V-Server/V-Server Lite has a buffer overflow vulnerability, which is caused by a boundary error when the application processes untrusted input
Trust: 2.16
IOT TAXONOMY
| category: | ['ICS'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | fujielectric | model: | v-server | scope: | lte | version: | 4.0.18.0 | Trust: 1.0 |
| vendor: | 富士電機 | model: | v-server | scope: | - | version: | - | Trust: 0.8 |
| vendor: | 富士電機 | model: | v-server | scope: | lte | version: | 4.0.18.0 and earlier | Trust: 0.8 |
| vendor: | 富士電機 | model: | v-server | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | fuji | model: | electric v-server | scope: | lte | version: | <=4.0.18.0 | Trust: 0.6 |
| vendor: | fuji | model: | electric v-server lite | scope: | lte | version: | <=4.0.18.0 | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.0 |
| problemtype: | Out-of-bounds writing (CWE-787) [NVD evaluation ] | Trust: 0.8 |
PATCH
| title: | Patch for Fuji Electric V-Server/V-Server Lite Buffer Overflow Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/711321 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2023-47586 | Trust: 3.2 |
| db: | JVN | id: | JVNVU93840158 | Trust: 1.8 |
| db: | JVNDB | id: | JVNDB-2023-017368 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2025-16676 | Trust: 0.6 |
REFERENCES
| url: | https://jvn.jp/en/vu/jvnvu93840158/ | Trust: 1.8 |
| url: | https://hakko-elec.co.jp/site/download/03tellus_inf/index.php | Trust: 1.8 |
| url: | https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2023-47586 | Trust: 1.4 |
SOURCES
| db: | CNVD | id: | CNVD-2025-16676 |
| db: | JVNDB | id: | JVNDB-2023-017368 |
| db: | NVD | id: | CVE-2023-47586 |
LAST UPDATE DATE
2025-07-28T23:11:21.235000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2025-16676 | date: | 2025-07-23T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-017368 | date: | 2024-01-09T01:23:00 |
| db: | NVD | id: | CVE-2023-47586 | date: | 2023-11-21T21:49:07.800 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2025-16676 | date: | 2025-07-23T00:00:00 |
| db: | JVNDB | id: | JVNDB-2023-017368 | date: | 2024-01-09T00:00:00 |
| db: | NVD | id: | CVE-2023-47586 | date: | 2023-11-15T06:15:28.303 |