Fujielectric d300win vulnerabilities

2 CVEs affecting Fujielectric d300win, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-1738, published 2022-10-19.

More from Fujielectric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-1738, published 2022-10-19. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process memory.
• CVE-2022-1523, published 2022-10-19. Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days. Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to a write-what-where condition, which could allow an attacker to overwrite program memory to manipulate the flow of information.