Skip to content
OpenAdvisories
High ICSA-21-299-01 6 CVEs

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

Published Oct 26, 2021 · Updated Oct 26, 2021

Vendor: Fuji Electric Product: Tellus Lite V-Simulator Product: V-Server Lite

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause data corruption, read sensitive information, obtain code execution, or crash the application.

Vulnerabilities 6

  • High 7.8
    CVE-2021-38401

    Fuji Electric Tellus Lite V-Simulator untrusted pointer dereference

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.

    Fuji Electric Tellus Lite V-Simulator V-Server Lite
  • High 7.8
    CVE-2021-38409

    Fuji Electric Tellus Lite V-Simulator uninitialized pointer

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service.

    Fuji Electric Tellus Lite V-Simulator V-Server Lite
  • High 7.8
    CVE-2021-38413

    Fuji Electric Tellus Lite V-Simulator stack based buffer overflow

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.

    Fuji Electric Tellus Lite V-Simulator V-Server Lite
  • High 7.8
    CVE-2021-38415

    Fuji Electric Tellus Lite V-Simulator heap based buffer overflow

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.

    Fuji Electric Tellus Lite V-Simulator V-Server Lite
  • High 7.8
    CVE-2021-38419

    Fuji Electric Tellus Lite V-Simulator out of bounds write

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution.

    Fuji Electric Tellus Lite V-Simulator V-Server Lite
  • High 7.8
    CVE-2021-38421

    Fuji Electric Tellus Lite V-Simulator out of bounds read

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from other memory locations or cause a crash.

    Fuji Electric Tellus Lite V-Simulator V-Server Lite

Revision history

  1. #1

    ICSA-21-299-01 Fuji Electric Tellus Lite and V-Server Lite

References