CVE-2023-47586

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	V-Server	V4.0.18.0 and earlier
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	V-Server Lite	V4.0.18.0 and earlier
fujielectric	v-server_lite	< V4.0.18.0

References

https://hakko-elec.co.jp/site/download/03tellus_inf/index.phpVendor Advisory
https://jvn.jp/en/vu/JVNVU93840158/Third Party Advisory
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.phpVendor Advisory
https://hakko-elec.co.jp/site/download/03tellus_inf/index.phpVendor Advisory
https://jvn.jp/en/vu/JVNVU93840158/Third Party Advisory
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.phpVendor Advisory

Timeline

Published: Nov 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-47598.8Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a speci CVE-2023-47609.8In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload compon CVE-2023-476098.8SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or ob CVE-2023-47618.1Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer pro CVE-2023-476109.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthentic CVE-2023-476117.8A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, T CVE-2023-476126.1A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit CVE-2023-476137.1A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Ci CVE-2023-476143.3A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8 CVE-2023-476155.5A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS5, Telit Cinterion E CVE-2023-476164.6A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8 CVE-2023-476177.2A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Omada Gigabit VPN Route