A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.02155·Published 2021-01-27·Fixed in 4.0.10.0CWE-122
An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Sim…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.01939·Published 2021-01-27·Fixed in 4.0.10.0CWE-824
Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tel…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.02235·Published 2021-01-27·Fixed in 4.0.10.0CWE-121
Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.01243·Published 2021-01-27·Fixed in 4.0.10.0CWE-125
Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.01243·Published 2021-01-27·Fixed in 4.0.10.0CWE-787
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.0097·Published 2021-12-20·Fixed in 4.0.12.0CWE-787
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.01036·Published 2021-12-20·Fixed in 4.0.12.0CWE-122
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.01041·Published 2021-12-20·Fixed in 4.0.12.0CWE-121
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.00975·Published 2021-12-20·Fixed in 4.0.12.0CWE-822
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from other memory locations or cause a crash.
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.00801·Published 2021-12-20·Fixed in 4.0.12.0CWE-125
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a…
CVSS 3.1HIGH 7.8·Local·No auth·User interaction·EPSS 0.00733·Published 2021-12-20·Fixed in 4.0.12.0CWE-824