ZDI-CAN-22875: ZDI-24-679: Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Jun 13, 2024

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Tellus Lite. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-37029.

Affected Software

1 affected component

Fuji Electric Tellus Lite V-Simulator=6

Event History

Jun 13, 2024

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-22875?

The severity of ZDI-CAN-22875 is determined by its potential to allow remote code execution on affected installations.

How do I fix ZDI-CAN-22875?

To fix ZDI-CAN-22875, ensure that you apply the latest security patches released by Fuji Electric for Tellus Lite V-Simulator.

Who is affected by ZDI-CAN-22875?

ZDI-CAN-22875 affects installations of Fuji Electric Tellus Lite V-Simulator version 6.

What type of vulnerability is ZDI-CAN-22875?

ZDI-CAN-22875 is a remote code execution vulnerability requiring user interaction to exploit.

What are the consequences of ZDI-CAN-22875?

The consequences of ZDI-CAN-22875 include the potential for attackers to execute arbitrary code on vulnerable systems.