Fuji Electric Tellus Lite V-Simulator stack based buffer overflow
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.
Fuji Electric recommends updating software to the latest version:
TELLUS Lite software: Version 4.0.12.0 Disk1
TELLUS Lite software: Version 4.0.12.0 Disk2
V-Server Lite software: Version 4.0.12.0 Disk1
V-Server Lite software: Version 4.0.12.0 Disk2
Configurations
Workarounds
Exploits
Credits
kimiya, working with Trend Micro’s Zero Day Initiative, and Michael Heinzl reported these vulnerabilities to CISA.