ICSA-21-299-01

icsaUScisa_csaf_ot

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

view advisory published 2021-10-26

Successful exploitation of these vulnerabilities could allow an attacker to cause data corruption, read sensitive information, obtain code execution, or crash the application.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2021-38421UShigh7.1—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from ot…
CVE-2021-38419UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code exe…
CVE-2021-38415UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow…
CVE-2021-38413UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.
CVE-2021-38409UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to un…
CVE-2021-38401UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan