CVE-2021-38401: Fuji Electric Tellus Lite V-Simulator untrusted pointer dereference
Published Dec 20, 2021
·Updated
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.
Affected Software
4 affected componentsFixes available
Fuji Electric V-Server Lite<4.0.12.0
4.0.12.0
Fuji Electric Tellus Lite V-Simulator<4.0.12.0
4.0.12.0
Fujielectric V-server<4.0.12.0
Fujielectric V-simulator<4.0.12.0
Remediation
Patch Available
Information
Fuji Electric recommends updating software to the latest version:
TELLUS Lite software: Version 4.0.12.0 Disk1
TELLUS Lite software: Version 4.0.12.0 Disk2
V-Server Lite software: Version 4.0.12.0 Disk1
V-Server Lite software: Version 4.0.12.0 Disk2
Event History
Dec 20, 2021
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
RemedyDescriptionSeverityWeakness
Aug 4, 2024
Data Sourced
via ICS·01:44 AM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-38401.
2
What is the severity of CVE-2021-38401?
The severity of CVE-2021-38401 is high with a severity value of 7.8.
3
Which software versions are affected by CVE-2021-38401?
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 are affected by CVE-2021-38401.
4
What is the potential impact of CVE-2021-38401?
CVE-2021-38401 may allow an attacker to execute arbitrary code and cause the application to crash.
5
How can I mitigate the vulnerability CVE-2021-38401?
Ensure that you have updated Fuji Electric V-Server Lite and Tellus Lite V-Simulator to version 4.0.12.0 or newer to mitigate the vulnerability.