CVE-2023-32201: Buffer Overflow

Published Jun 19, 2023

Updated

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273.

Affected Software

2 affected components

Fujielectric Tellus=4.0.15.0

Fujielectric Tellus Lite=4.0.15.0

Event History

Jun 19, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-32201?

CVE-2023-32201 is a stack-based buffer overflow vulnerability that exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0.

What is the severity of CVE-2023-32201?

The severity of CVE-2023-32201 is high with a CVSS score of 7.8.

How does CVE-2023-32201 affect the affected software?

CVE-2023-32201 may lead to information disclosure and/or arbitrary code execution when opening a specially crafted SIM2 file in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0.

Which software versions are affected by CVE-2023-32201?

CVE-2023-32201 affects TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0.

How can I fix CVE-2023-32201?

To fix CVE-2023-32201, it is recommended to update to a secure version of TELLUS or TELLUS Lite provided by Fujielectric.