Fuji Electric Tellus Lite V-Simulator Stack-based Buffer Overflow
CVE-2023-35127

7.8HIGH

Key Information:

Vendor

Fuji Electric

Status
Tellus Lite V-simulator
Vendor
CVE Published:
22 November 2023

What is CVE-2023-35127?

A stack-based buffer overflow vulnerability has been identified in Fuji Electric's Tellus Lite V-Simulator. This issue arises when the application processes a specially-crafted input file, potentially allowing an attacker to execute arbitrary code or crash the application, posing significant security risks to susceptible systems.

Affected Version(s)

Tellus Lite V-Simulator 0 < 4.0.19.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-3...
https://felib.fujielectric.co.jp/en/M10009/M20034/documen...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Fritz Sands and kimiya working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
JSON
.