Fuji Electric Tellus Lite V-Simulator and V-Server Lite

🗓️ 26 Oct 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 87 Views

Fuji Electric Tellus Lite V-Simulator and V-Server Lite affected by multiple vulnerabilitie

Reporter	Title	Published	Views	Family All 73
ATTACKERKB	CVE-2021-38415	20 Dec 202121:15	–	attackerkb
ATTACKERKB	CVE-2021-38413	20 Dec 202121:15	–	attackerkb
ATTACKERKB	CVE-2021-38419	20 Dec 202121:15	–	attackerkb
ATTACKERKB	CVE-2021-38421	20 Dec 202121:15	–	attackerkb
ATTACKERKB	CVE-2021-38401	20 Dec 202121:15	–	attackerkb
ATTACKERKB	CVE-2021-38409	20 Dec 202121:15	–	attackerkb
BDU FSTEC	The vulnerability of the monitoring software for PLK devices from Fuji Electric, V-Server Lite and Tellus Lite V-Simulator, arises from the possibility of executing arbitrary code or triggering a service failure when a write operation occurs outside the buffer in memory.	1 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the V-Simulator software module for monitoring the status of Fuji Electric’s V-Server Lite and Tellus Lite V-Simulator lies in the reading beyond the buffer boundaries in memory. This allows a perpetrator to execute arbitrary code.	3 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, stems from the use of an uninitialized pointer. This allows a intruder to trigger a service failure.	16 Dec 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the monitoring software for PLK devices from Fuji Electric, namely V-Server Lite and Tellus Lite V-Simulator, arises from the use of an unreliable pointer. This allows a perpetrator to execute arbitrary code or trigger a service failure.	17 Dec 202100:00	–	bdu_fstec

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-299-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-299-01
us-cert	www.us-cert.cisa.gov/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-299-01

26 Oct 2021 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 3.17.8

EPSS0.00981

cvss v3 7.8 low attack complexity stack-based buffer overflow out-of-bounds write untrusted pointer dereference access of uninitialized pointer heap-based buffer overflow data corruption sensitive information code execution system crash cve-2021-38413 cve-2021-38419 cve-2021-38401 cve-2021-38421 cve-2021-38409