CVE-2021-22639

2021-01-2719:05:19

CWE-824

icscert

www.cve.org

0.001 Low

EPSS

Percentile

35.7%

JSON

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CNA Affected

[
  {
    "product": "Tellus Lite V-Simulator and V-Server Lite",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 4.0.10.0"
      }
    ]
  }
]