CVE-2023-32288: High severity tellus vulnerability
Published Jun 19, 2023
·Updated
Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution.
Affected Software
2 affected components
Fujielectric Tellus=4.0.15.0
Fujielectric Tellus Lite=4.0.15.0
Event History
Jun 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2023-32288?
CVE-2023-32288 is an out-of-bounds read vulnerability in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0.
2
What is the severity of CVE-2023-32288?
The severity of CVE-2023-32288 is high with a CVSS score of 7.8.
3
How does CVE-2023-32288 affect Fujielectric Tellus and Tellus Lite?
CVE-2023-32288 affects Fujielectric Tellus v4.0.15.0 and Fujielectric Tellus Lite v4.0.15.0.
4
How can CVE-2023-32288 be exploited?
CVE-2023-32288 can be exploited by opening a specially crafted SIM file, which may lead to information disclosure and/or arbitrary code execution.
5
How can I fix CVE-2023-32288?
To fix CVE-2023-32288, it is recommended to upgrade to a patched version of TELLUS or TELLUS Lite provided by Fujielectric.