CVE-2023-32288

CVE-2023-32288 affects Fuji Electric TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. The issue is an out-of-bounds read in the handling of SIM files, which can lead to information disclosure and potentially arbitrary code execution. Public sources (PT-2023-23701) specify the vulnerable versions and r...

CVE-2023-32276: Out-of-bounds Write

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

PT-2023-23701 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: TELLUS version 4.0.15.0 TELLUS Lite version 4.0.15.0 Description: An out-of-bounds read issue exists, potentially leading to information disclosure and/or arbitrary code execution when opening a specially crafted SIM file. Recommendations: Fo...

CVE-2023-32273

CVE-2023-32273 affects TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. It is a stack-based buffer overflow in parsing a SIM2 file, enabling information disclosure and/or arbitrary code execution. No patch/version details are provided in the documents; remediation is not specified.

CVE-2023-32288

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-32542

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-32273

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32201...

CVE-2023-32270

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-32201

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273...

CVE-2023-32270: Improper Restriction of Operations within the Bounds of a Memory Buffer

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-32270

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-32276

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution...

Fuji Electric TELLUS 缓冲区错误漏洞

Fuji Electric TELLUS and Fuji Electric TELLUS Lite are both products of Fuji Electric, Japan.Fuji Electric TELLUS is a specialized software for advanced features, user-friendliness and remote control.Fuji Electric TELLUS Lite is a remote control software. A buffer overflow vulnerability exists in...

CVE-2023-32288

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution...

CVE-2023-32276

CVE-2023-32276 describes a stack-based buffer overflow in Fuji Electric TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. The root cause is improper validation of input length when processing a V8 file, which can lead to information disclosure and/or arbitrary code execution. The vulnerability affects ...

CVE-2023-32542

CVE-2023-32542 affects Fuji Electric TELLUS and TELLUS Lite v4.0.15.0, with an out-of-bounds read when opening specially crafted V8 files, potentially enabling information disclosure and/or arbitrary code execution. The CVE is documented across multiple feeds (NVD, RH, CNVD, JVN, etc.). A concret...

CVE-2023-32270

CVE-2023-32270 affects Fuji Electric TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. The issue is an Access of memory location after end of buffer (out-of-bounds read) when opening a specially crafted V8 file, with potential for information disclosure and arbitrary code execution. Public sources in t...

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, relates to buffer overflow in the stack. This allows a hacker to execute arbitrary code.

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, arises from writing beyond the buffer boundaries in memory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the monitoring software for PLCCs from Fuji Electric, Tellus Lite V-Simulator, lies in the ability to write data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Multiple vulnerabilities in Fuji Electric products

Overview Multiple vulnerabilities listed below exist in the simulator module and the remote monitoring software 'V-Server Lite' and 'V-Server' contained in the graphic editor 'V-SFT', and the remote monitoring software 'TELLUS' and 'TELLUS Lite' provided by FUJI ELECTRIC CO., LTD. Stack-based...