ZDI-CAN-22746: ZDI-24-678: Fuji Electric Tellus Lite V-Simulator 6 X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Jun 13, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-37022.

Affected Software

1 affected component

Fuji Electric Tellus Lite V-Simulator

Event History

Jun 13, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-22746?

ZDI-CAN-22746 has been assigned a CVSS score that indicates it is a critical vulnerability.

How do I fix ZDI-CAN-22746?

To mitigate ZDI-CAN-22746, users should update their installation of Fuji Electric Tellus Lite V-Simulator to the latest version provided by the vendor.

What type of attacks can be performed using ZDI-CAN-22746?

ZDI-CAN-22746 allows remote attackers to execute arbitrary code on affected installations through user interaction.

Does ZDI-CAN-22746 require user interaction to exploit?

Yes, ZDI-CAN-22746 requires user interaction, as the target must visit a malicious page or open a malicious file.

Which version of Fuji Electric Tellus Lite is affected by ZDI-CAN-22746?

ZDI-CAN-22746 affects the Fuji Electric Tellus Lite V-Simulator.