CVE-2020-10646

Fuji Electric V-Server Lite is affected: all versions prior to 4.0.9.0 suffer a heap-based buffer overflow while parsing VPR files due to an undersized read buffer. This can enable remote code execution in the context of the affected process; some advisories note that exploitation may require use...

CVE-2022-29506

CVE-2022-29506 affects Fuji Electric Monitouch V-SFT, specifically the simulator module, with V-SFT versions up to 6.1.3.0 vulnerable to an out-of-bounds read (CWE-125) that can lead to information disclosure and arbitrary code execution when a user opens a specially crafted image file. JPN/JPCER...

CVE-2022-29522

The CVE-2022-29522 entry affects Fuji Electric’s V-SFT (Monitouch) graphic editor, specifically the simulator module, where a Use-After-Free condition can be triggered by opening a specially crafted image file. The linked JVN/UVD entries confirm the vulnerability class (CWE-416) and indicate impa...

CVE-2019-3946

Affected product: Fuji Electric V-Server (pre-6.0.33.0). Component/trigger: UDP message handling on port 8005. Root cause: integer overflow in UDP processing leads to crash of vserver.exe. Impact: denial of service with partial/high availability impact as per CVSS (unauthenticated remote attacker...

CVE-2021-22655

Fuji Electric Tellus Lite V-Simulator and V-Server Lite (pre-4.0.10.0) are affected by CVE-2021-22655, an out-of-bounds read in project-file processing that may allow arbitrary code execution when a crafted project file is used. Affected products: Tellus Lite V-Simulator and V-Server Lite; root c...

CVE-2022-30549

CVE-2022-30549 describes an out-of-bounds read in Fuji Electric’s V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, exploitable by opening a specially crafted image file. The Red Hat/NVD entries corroborate the vulnerability in V-Server/V-Server Lite, with potential informat...

CVE-2021-22639

CVE-2021-22639 affects Fuji Electric Tellus Lite V‑Simulator and V‑Server Lite (versions before 4.0.10.0). The issue is an uninitialized pointer in how the application processes project files, which may allow an attacker to craft a special project file to achieve arbitrary code execution in the a...

CVE-2022-29524

CVE-2022-29524 is an out-of-bounds write vulnerability in Fuji Electric V-Server (v4.0.11.0 and earlier) and V-Server Lite (v4.0.13.0 and earlier). The issue arises from a boundary/input handling flaw that could allow information disclosure and arbitrary code execution when a user opens a special...

CVE-2021-22637

Summary (CVE-2021-22637) Multiple stack-based buffer overflow issues in Fuji Electric Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0) arise from how project files are processed, potentially allowing arbitrary code execution. Connected sources confirm the affected products a...

CVE-2021-22653

CVE-2021-22653 describes multiple out-of-bounds write vulnerabilities in Fuji Electric Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0) triggered by processing project files. Root cause: out-of-bounds write in the handling of project files could permit arbitrary code executi...

CVE-2020-25171

The CVE-2020-25171 issue affects Fuji Electric V-Server Lite before version 3.3.24.0. The vulnerability is an out-of-bounds write in the VPR file parsing code, which can enable remote code execution. ZDI-tied advisories state exploitation requires user interaction (the target must load a maliciou...

CVE-2021-22641

CVE-2021-22641 is a heap-based buffer overflow vulnerability in Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.10.0. The issue arises in how project files are processed, allowing an attacker to craft a special project file that may lead to arbitrary code execution w...

CVE-2021-38419

Fuji Electric Tellus Lite V-Simulator and V-Server Lite are affected by an out-of-bounds write in parsing of V8/V9 files (and related components), leading to data corruption, system crash, or remote code execution. Exploitation details vary by sub-variant (V8/V9 file parsing), with some advisorie...

CVE-2019-18240

CVE-2019-18240 affects Fuji Electric V-Server 4.0.6 and earlier. The connected documents describe heap-based buffer overflows in V-Server, specifically in the handling of input data (notably VPR files), which may allow remote attackers to execute arbitrary code on affected installations. No concr...

CVE-2019-3947

CVE-2019-3947 affects Fuji Electric V-Server prior to 6.0.33.0 where database credentials are stored in project files as plaintext. The underlying issue is the plaintext storage of credentials in project files, enabling an attacker who can access those files to recover the credentials and gain ac...

CVE-2021-38409

CVE-2021-38409 affects Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.12.0. The vulnerability is an access of an uninitialized pointer that can allow reading from or writing to unintended memory, leading to a denial of service. Affected products: V-Server Lite and T...

CVE-2021-38413

CVE-2021-38413 concerns Fuji Electric Tellus Lite and V-Server Lite (V-Simulator) vulnerable to a stack-based buffer overflow in V-Simulator file parsing (X1/V9). ZDI advisories describe the flaw as improper validation of the length of user-supplied data before copying to a fixed-size stack buffe...

CVE-2021-38415

Fuji Electric Tellus Lite V-Simulator and V-Server Lite are affected (versions prior to 4.0.12.0). The issue is a heap-based buffer overflow when parsing a specially crafted project file, which may allow arbitrary code execution. ZDI details indicate remote code execution via V8 file parsing, wit...

CVE-2021-38421

CVE-2021-38421 affects Fuji Electric Tellus Lite V-Simulator and V-Server Lite, prior to version 4.0.12.0. The vulnerability is an out-of-bounds read in V8 file parsing that can read sensitive memory or crash the process; ZDI notes this as enabling remote code execution in some contexts. Affected...

CVE-2021-38401

Fuji Electric V-Server Lite and Tellus Lite V-Simulator are affected by CVE-2021-38401 due to an untrusted pointer dereference in versions prior to 4.0.12.0. The flaw can allow arbitrary code execution and cause a crash. Publicly reported in ICSA-NC and CVE references; CVSS v3 base score is 7.8 (...

CVE-2022-47317

The CVE-2022-47317 entry concerns Fuji Electric V-Server. Affected: V-Server versions 4.0.12.0 and earlier. Vulnerability: out-of-bounds write in the handling of project files, enabling a local attacker to obtain information and execute arbitrary code by having a user open a specially crafted pro...

CVE-2022-47908

Fuji Electric V-Server

CVE-2018-10637

CVE-2018-10637 concerns a buffer overflow in Fuji Electric V-Server Lite when parsing the project file (the issue is a classic buffer overflow due to a buffer copy without checking input length, CWE-120). Affected are Fuji Electric V-Server Lite versions 4.0.3.0 and earlier. The vulnerability cou...

CVE-2023-31239

CVE-2023-31239 affects Fuji Electric V-Server and V-Server Lite up to v4.0.15.0. It is a stack-based buffer overflow caused by a boundary check error, allowing arbitrary code execution when a user opens a specially crafted VPR file. Local attacker interaction is required. Root cause and impact ar...

CVE-2017-9639

Fuji Electric V-Server is affected: version 3.3.22.0 and earlier suffer a memory corruption vulnerability (CWE-119) that may allow remote code execution. The issue stems from improper restriction of operations within memory buffer bounds, as detailed across multiple sources (NVD, CVE-2017-9639; Z...

CVE-2022-41645

Summary (CVE-2022-41645) : Fuji Electric’s V-Server contains an out-of-bounds read vulnerability affecting versions 4.0.12.0 and earlier. A local attacker can obtain sensitive information and/or execute arbitrary code by prompting a user to open a specially crafted project file. The issue is caus...

CVE-2023-47585

The CVE-2023-47585 entry describes an out-of-bounds read in Fuji Electric’s V-Server (v4.0.18.0 and earlier) and V-Server Lite (v4.0.18.0 and earlier). The underlying issue is triggered when a user opens a specially crafted VPR file, which can disclose information and potentially allow arbitrary ...

CVE-2023-47586

Fuji Electric V-Server and V-Server Lite are affected (versions 4.0.18.0 and earlier). The vulnerability is a heap-based buffer overflow triggered when processing untrusted VPR input, enabling information disclosure and/or arbitrary code execution upon opening a crafted VPR file. Exploitation is ...

CVE-2023-47584

The CVE concerns Fuji Electric V-Server and V-Server Lite (up to version 4.0.18.0). A vulnerability described as an out-of-bounds write results from improper validation of user-supplied data when opening a specially crafted VPR file, potentially allowing information disclosure and/or arbitrary co...