Access of Uninitialized Pointer Vulnerability in TELLUS by Fujielectric
CVE-2023-47582

7.8HIGH

Key Information:

Vendor

Fuji Electric Co., Ltd. And Hakko Electronics Co., Ltd.

Status
Tellus
Tellus Lite
Vendor
CVE Published:
15 November 2023

What is CVE-2023-47582?

A vulnerability exists in TELLUS and TELLUS Lite, versions V4.0.17.0 and earlier, which can be exploited when a user opens a specially crafted file (X1, V8, or V9). This flaw may lead to the disclosure of sensitive information and allows for the execution of arbitrary code, posing significant security risks to users.

Affected Version(s)

TELLUS V4.0.17.0 and earlier

TELLUS Lite V4.0.17.0 and earlier

References

https://monitouch.fujielectric.com/site/download-e/03tell...
https://hakko-elec.co.jp/site/download/03tellus_inf/index...
https://jvn.jp/en/vu/JVNVU93840158/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-47582 : Access of Uninitialized Pointer Vulnerability in TELLUS by Fujielectric