CVE-2022-3087 - Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code

Back Back to CVE browser

HIGH

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code

Published Jan 16, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.30%

Description

Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code.

Affected products

Vendor Fuji Electric Product Tellus Lite V-Simulator Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=4.0.12.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fuji Electric

Tellus Lite V-Simulator

unaffected

Version	Status	Constraints
0	affected	<=4.0.12.0

Remediation

Vendor solution

Fuji Electric recommends users update Tellus Lite V-Simulator to version 4.0.15.0 https://felib.fujielectric.co.jp/download/pod_document.htm .

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42516
Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-01
government-resourceThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-42516		Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-354-01		government-resourceThird Party AdvisoryUS Government Resource