title: Yokogawa WideField3 Buffer Copy Without Checking Size of Input
description: In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.
problem types: CWE-120 Buffer Overflow
affected:
{
product: WideField3
vendor: Yokogawa
versions:
lessThanOrEqual: R4.03, status: affected, version: R1.01, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
]
solutions: Yokogawa has prepared revision R4.04 to address this vulnerability and recommends that users switch to this revision.
For more information about this vulnerability and the associated mitigations, please see Yokogawa’s security advisory report YSAR-20-0002