CVE-2023-47580

2023-11-1505:40:43

jpcert

www.cve.org

tellus

memory buffer

information disclosure

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

JSON

Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.

CNA Affected

[
  {
    "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
    "product": "TELLUS",
    "versions": [
      {
        "version": "V4.0.17.0 and earlier",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
    "product": "TELLUS Lite",
    "versions": [
      {
        "version": "V4.0.17.0 and earlier",
        "status": "affected"
      }
    ]
  }
]