Out-of-Bounds Read Vulnerabilities in TELLUS Simulator by Fuji Electric
CVE-2023-47583

7.8HIGH

Key Information:

Vendor

FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.

Status
TELLUS Simulator
Vendor
CVE Published:
15 November 2023

What is CVE-2023-47583?

Multiple out-of-bounds read vulnerabilities have been identified in TELLUS Simulator V4.0.17.0 and earlier. When a user opens specially crafted files, such as X1 or V9 files, there is a risk of information disclosure or the execution of arbitrary code. This underscores the importance of ensuring that file inputs are properly validated to mitigate potential security threats.

Affected Version(s)

TELLUS Simulator V4.0.17.0 and earlier

References

https://monitouch.fujielectric.com/site/download-e/03tell...
https://hakko-elec.co.jp/site/download/03tellus_inf/index...
https://jvn.jp/en/vu/JVNVU93840158/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-47583 : Out-of-Bounds Read Vulnerabilities in TELLUS Simulator by Fuji Electric