ICSA-21-299-01

icsaUScisa_csaf_ot

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

Advisory ansehen veröffentlicht 2021-10-26

Successful exploitation of these vulnerabilities could allow an attacker to cause data corruption, read sensitive information, obtain code execution, or crash the application.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-38421UShigh7.1—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from ot…
CVE-2021-38419UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code exe…
CVE-2021-38415UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow…
CVE-2021-38413UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.
CVE-2021-38409UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to un…
CVE-2021-38401UShigh7.8—
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan