ZDI-CAN-21210: ZDI-23-1724: Fuji Electric Tellus Lite V-Simulator V9 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Nov 27, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2023-40152.

Affected Software

1 affected component

Fuji Electric Tellus Lite=V-Simulator V9

Event History

Nov 27, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-21210?

ZDI-CAN-21210 has a high severity rating due to its potential for remote code execution.

How do I fix ZDI-CAN-21210?

To fix ZDI-CAN-21210, update Fuji Electric Tellus Lite to the latest version that addresses this vulnerability.

What type of attack utilizes ZDI-CAN-21210?

ZDI-CAN-21210 can be exploited through remote attacks requiring user interaction, such as visiting a malicious website or opening a compromised file.

Which versions of Fuji Electric Tellus Lite are affected by ZDI-CAN-21210?

ZDI-CAN-21210 specifically affects Fuji Electric Tellus Lite V-Simulator V9.

Is user interaction required to exploit ZDI-CAN-21210?

Yes, user interaction is necessary to exploit ZDI-CAN-21210.