Lucene search

IcscertCVELIST:CVE-2021-22655

HistoryJan 27, 2021 - 7:06 p.m.

CVE-2021-22655

2021-01-2719:06:42

CWE-125

icscert

www.cve.org

out-of-bounds read

tellus v-simulator

arbitrary code execution

cve-2021-22655

v-server lite

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

33.1%

JSON

Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CNA Affected

[
  {
    "product": "Tellus Lite V-Simulator and V-Server Lite",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 4.0.10.0"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-026-01