Description
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fuji Electric | V-Server Lite | unspecified – < 4.0.12.0 | 4.0.12.0 |
| Fuji Electric | Tellus Lite V-Simulator | unspecified – < 4.0.12.0 | 4.0.12.0 |
Advisories 1
- ICSA-21-299-01 Fuji Electric Tellus Lite V-Simulator and V-Server Lite CISA ICS & IT advisories · Oct 26, 2021