CVE-2021-22653: High severity fujielectric tellus lite v-simulator vulnerability
Published Jan 27, 2021
·Updated
Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).
Affected Software
4 affected componentsFixes available
Fuji Electric Tellus Lite V-Simulator<4.0.10.0
4.0.10.0
Fuji Electric V-Server Lite<4.0.10.0
4.0.10.0
Fujielectric V-server<4.0.10.0
Fujielectric V-simulator<4.0.10.0
Event History
Jan 27, 2021
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-22653.
2
What is the severity of CVE-2021-22653?
The severity of CVE-2021-22653 is high, with a CVSS score of 7.8.
3
Which software versions are affected by CVE-2021-22653?
The Tellus Lite V-Simulator and V-Server Lite versions prior to 4.0.10.0 are affected by CVE-2021-22653.
4
What is the impact of CVE-2021-22653?
CVE-2021-22653 allows an attacker to craft a special project file that may allow arbitrary code execution on the affected software.
5
Is there a fix available for CVE-2021-22653?
Yes, updating to version 4.0.10.0 of Tellus Lite V-Simulator and V-Server Lite fixes CVE-2021-22653.