Buffer Overflow Vulnerability in TELLUS Software by Fujielectric
CVE-2023-32538

7.8HIGH

Key Information:

Vendor

Fuji Electric Co., Ltd. And Hakko Electronics Co., Ltd.

Status
Tellus And Tellus Lite
Vendor
CVE Published:
19 June 2023

What is CVE-2023-32538?

A vulnerability present in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0 allows for a stack-based buffer overflow when a specially crafted SIM2 file is opened. This may lead to information disclosure and can enable arbitrary code execution, which can potentially compromise the security of users' systems. This issue highlights significant risks in file handling and the need for users to apply appropriate mitigations and updates provided by the vendor.

Affected Version(s)

TELLUS and TELLUS Lite v4.0.15.0 and earlier

References

https://monitouch.fujielectric.com/site/download-e/03tell...
https://jvn.jp/en/vu/JVNVU98818508/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.