CVE-2021-38415: falha de alta gravidade em Fuji Electric Tellus Lite V-Simulator
Fuji Electric Tellus Lite V-Simulator heap based buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 1.0%
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVEs relacionadas — Fuji Electric Tellus Lite V-Simulator
No mesmo produto, das mais perigosas para as menos.
CVE-2018-10637—CVE-2018-10637EPSS 1.8%CVE-2020-25171—Fuji Electric V-Server LiteEPSS 1.2%CVE-2021-38413HIGHFuji Electric Tellus Lite V-Simulator stack based buffer overflowEPSS 1.0%CVE-2021-38401HIGHFuji Electric Tellus Lite V-Simulator untrusted pointer dereferenceEPSS 1.0%CVE-2021-38419HIGHFuji Electric Tellus Lite V-Simulator out of bounds writeEPSS 1.0%CVE-2021-38421HIGHFuji Electric Tellus Lite V-Simulator out of bounds readEPSS 0.8%