CVE-2019-3947

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-06-12 · updated 2026-06-17
Weakness: CWE-522

Description

Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.

Affected products

Fuji Electric V-Server Lite: before 6.0.33.0 — fixed in 6.0.33.0

How to fix

Upgrade to a fixed version: Fuji Electric V-Server Lite 6.0.33.0. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/108740
https://www.tenable.com/security/research/tra-2019-27
http://www.securityfocus.com/bid/108740
https://www.tenable.com/security/research/tra-2019-27

Get alerted when CVE-2019-3947 or the next vulnerability affects your stack