Buffer Overflow Vulnerability in TELLUS Software by Fujielectric
CVE-2023-32538

7.8HIGH

Key Information:

Vendor

Fuji Electric Co., Ltd. And Hakko Electronics Co., Ltd.

Status
Tellus And Tellus Lite
Vendor
CVE Published:
19 June 2023

What is CVE-2023-32538?

A vulnerability present in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0 allows for a stack-based buffer overflow when a specially crafted SIM2 file is opened. This may lead to information disclosure and can enable arbitrary code execution, which can potentially compromise the security of users' systems. This issue highlights significant risks in file handling and the need for users to apply appropriate mitigations and updates provided by the vendor.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

TELLUS and TELLUS Lite v4.0.15.0 and earlier

References

https://monitouch.fujielectric.com/site/download-e/03tell...
https://jvn.jp/en/vu/JVNVU98818508/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.