Fuji Electric Tellus Lite V-Simulator and V-Server Lite

🗓️ 26 Jan 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 50 Views

Fuji Electric Tellus Lite V-Simulator and V-Server Lite are affected by stack-based buffer overflow, out-of-bounds read, out-of-bounds write, access of uninitialized pointer, heap-based buffer overflow vulnerabilities. Exploitation can lead to arbitrary code execution under application privileges. Versions prior to v4.0.10.0 are vulnerable

Reporter	Title	Published	Views	Family All 52
Circl	CVE-2021-22637	27 Jan 202122:37	–	circl
Circl	CVE-2021-22639	27 Jan 202122:37	–	circl
Circl	CVE-2021-22641	27 Jan 202122:37	–	circl
Circl	CVE-2021-22653	27 Jan 202122:37	–	circl
Circl	CVE-2021-22655	27 Jan 202122:37	–	circl
CNNVD	Fuji Electric Tellus Lite V-Simulator和Fuji Electric V-Server Lite 缓冲区错误漏洞	26 Jan 202100:00	–	cnnvd
CNNVD	Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞	26 Jan 202100:00	–	cnnvd
CNNVD	Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞	26 Jan 202100:00	–	cnnvd
CNNVD	Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞	26 Jan 202100:00	–	cnnvd
CNNVD	Fuji Electric Tellus Lite V-Simulator 和 Fuji Electric V-Server Lite 缓冲区错误漏洞	26 Jan 202100:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-026-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-026-01
us-cert	www.us-cert.cisa.gov/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

26 Jan 2021 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 26.8

CVSS 3.17.8

EPSS0.00483