Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS

Overview V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. contain multiple vulnerabilities listed below. Out-of-bounds Read CWE-125 - CVE-2022-46360 Out-of-bounds Write CWE-787 - CVE-2022-43448 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the develope...

CVE-2022-43448

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-43448

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-46360

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-46360

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

Cross site scripting

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

Cross site scripting

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

Fuji Electric Monitouch V-SFT和TELLUS 缓冲区错误漏洞

Fuji Electric Monitouch V-SFT and Fuji Electric TELLUS are both products of Fuji Electric Japan.Fuji Electric Monitouch V-SFT is a screen configuration software.Fuji Electric TELLUS is an advanced features, user-friendliness, and specialized software for remote control. A security vulnerability...

CVE-2022-43448: Out-of-bounds Write

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-43448

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

Fuji Electric Monitouch V-SFT和TELLUS 缓冲区错误漏洞

Fuji Electric Monitouch V-SFT and Fuji Electric TELLUS are both products of Fuji Electric Japan.Fuji Electric Monitouch V-SFT is a screen configuration software.Fuji Electric TELLUS is an advanced features, user-friendliness, and specialized software for remote control. A security vulnerability...

CVE-2022-46360

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-46360

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

PT-2023-14206 · Tellus +1 · Tellus +1

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.1.7.0 and earlier TELLUS versions 4.0.12.0 and earlier Description: The issue is an out-of-bounds write vulnerability that allows a local attacker to obtain information and/or execute arbitrary code. This can be achieved by...

CVE-2022-43448

Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

CVE-2022-46360

CVE-2022-46360 affects Fuji Electric V-SFT (v6.1.7.0 and earlier) and TELLUS (v4.0.12.0 and earlier). The vulnerability is an out-of-bounds read that can allow a local attacker to obtain information and potentially execute arbitrary code when a user opens a specially crafted image file. According...

CVE-2022-43448

CVE-2022-43448 is an out-of-bounds write vulnerability in Fuji Electric V-SFT (v6.1.7.0 and earlier) and TELLUS (v4.0.12.0 and earlier). The issue can be triggered when a user opens a specially crafted image file, allowing a local attacker to obtain information and/or execute arbitrary code. Publ...

CVE-2022-46360: Out-of-bounds Read

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file...

Fuji Electric Tellus Lite V-Simulator Stack Buffer Overflow Vulnerability

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments developed by FujiElectric Japan, which is mainly used to collect real-time data from PLCs Programmable Logic Controllers, temperature controllers, inverters, and other devices. Fuji Electric Tellus...

Fuji Electric Tellus Lite V-Simulator 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric Tellus Lite V-Simulator version 4.0.12.0 and prior versions, which stems from vulnerability to out-of-bounds writes, whi...