CVE-2021-38415: Fuji Electric Tellus Lite V-Simulator heap based buffer overflow
Published Dec 20, 2021
·Updated
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Affected Software
4 affected componentsFixes available
Fuji Electric V-Server Lite<4.0.12.0
4.0.12.0
Fuji Electric Tellus Lite V-Simulator<4.0.12.0
4.0.12.0
Fujielectric V-server<4.0.12.0
Fujielectric V-simulator<4.0.12.0
Remediation
Patch Available
Information
Fuji Electric recommends updating software to the latest version:
TELLUS Lite software: Version 4.0.12.0 Disk1
TELLUS Lite software: Version 4.0.12.0 Disk2
V-Server Lite software: Version 4.0.12.0 Disk1
V-Server Lite software: Version 4.0.12.0 Disk2
Event History
Dec 20, 2021
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-38415.
2
What is the severity of CVE-2021-38415?
The severity of CVE-2021-38415 is high with a CVSS score of 7.8.
3
What software versions are affected by CVE-2021-38415?
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 are affected by CVE-2021-38415.
4
How can an attacker exploit CVE-2021-38415?
An attacker can exploit CVE-2021-38415 by crafting a specially crafted project file, which may allow them to execute arbitrary code.
5
Is there a fix available for CVE-2021-38415?
Yes, updating to version 4.0.12.0 or higher of Fuji Electric V-Server Lite and Tellus Lite V-Simulator will fix CVE-2021-38415.