CVE-2018-14802 is a critical vulnerability affecting Fuji Electric FRENIC LOADER v3.3 and various FRENIC drive models, including FRENIC-Mini, FRENIC-Eco, and FRENIC-Multi. This flaw stems from improper user-supplied comment validation, enabling unauthenticated remote code execution. With a CVSS score of 9.8, it presents a critical risk due to its network-based attack vector, low complexity, and complete compromise potential (confidentiality, integrity, availability). While no public exploit code or active exploitation has been observed, the vulnerability has garnered some community discussion and media coverage, highlighting its significance.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.3.4.1aCPE matchmatch criteria | cpe:2.3:o:fujielectric:frenic_loader_3.3_firmware:7.3.4.1a:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.