jvndb - jvndb-2023-002072

jvndb-2023-002072

Vulnerability from jvndb

Published

2023-06-09 12:23

Modified

2024-05-23 15:33

Severity ?

7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Summary

Multiple vulnerabilities in Fuji Electric products

Details

Multiple vulnerabilities listed below exist in the simulator module and the remote monitoring software 'V-Server Lite' and 'V-Server' contained in the graphic editor 'V-SFT', and the remote monitoring software 'TELLUS' and 'TELLUS Lite' provided by FUJI ELECTRIC CO., LTD. * Stack-based buffer overflow in V-Serve, V-Server Lite (CWE-121) - CVE-2023-31239 * Stack-based buffer overflow in TELLUS, TELLUS Lite (CWE-121) - CVE-2023-32538, CVE-2023-32273, CVE-2023-32201 * Out-of-bounds read in TELLUS, TELLUS Lite (CWE-125) - CVE-2023-32288 * Stack-based buffer overflow in TELLUS, TELLUS Lite (CWE-121) - CVE-2023-32276 * Access of memory location after end of buffer in TELLUS, TELLUS Lite (CWE-788) - CVE-2023-32270 * Out-of-bounds read in TELLUS, TELLUS Lite (CWE-125) - CVE-2023-32542 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.

References

▼	Type	URL
	JVN	https://jvn.jp/en/vu/JVNVU98818508/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-31239
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32538
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32273
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32201
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32288
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32276
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32270
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32542
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-31239
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32201
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32270
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32273
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32276
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32288
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32538
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32542
	Stack-based Buffer Overflow(CWE-121)	https://cwe.mitre.org/data/definitions/121.html
	Out-of-bounds Read(CWE-125)	https://cwe.mitre.org/data/definitions/125.html
	Access of Memory Location After End of Buffer(CWE-788)	https://cwe.mitre.org/data/definitions/788.html

Impacted products

▼	Vendor	Product
	Fuji Electric Co., Ltd.	TELLUS
	Fuji Electric Co., Ltd.	TELLUS Lite
	Fuji Electric Co., Ltd.	V-Server

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002072.html",
  "dc:date": "2024-05-23T15:33+09:00",
  "dcterms:issued": "2023-06-09T12:23+09:00",
  "dcterms:modified": "2024-05-23T15:33+09:00",
  "description": "Multiple vulnerabilities listed below exist in the simulator module and the remote monitoring software \u0027V-Server Lite\u0027 and \u0027V-Server\u0027 contained in the graphic editor \u0027V-SFT\u0027, and the remote monitoring software \u0027TELLUS\u0027 and \u0027TELLUS Lite\u0027 provided by FUJI ELECTRIC CO., LTD.\r\n\r\n  * Stack-based buffer overflow in V-Serve, V-Server Lite (CWE-121) - CVE-2023-31239\r\n  * Stack-based buffer overflow in TELLUS, TELLUS Lite (CWE-121) - CVE-2023-32538, CVE-2023-32273, CVE-2023-32201\r\n  * Out-of-bounds read in TELLUS, TELLUS Lite (CWE-125) - CVE-2023-32288\r\n  * Stack-based buffer overflow in TELLUS, TELLUS Lite (CWE-121) - CVE-2023-32276\r\n  * Access of memory location after end of buffer in TELLUS, TELLUS Lite (CWE-788) - CVE-2023-32270\r\n  * Out-of-bounds read in TELLUS, TELLUS Lite (CWE-125) - CVE-2023-32542\r\n\r\nMichael Heinzl reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002072.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:fujielectric:tellus",
      "@product": "TELLUS",
      "@vendor": "Fuji Electric Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:fujielectric:tellus_lite",
      "@product": "TELLUS Lite",
      "@vendor": "Fuji Electric Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:fujielectric:v-server",
      "@product": "V-Server",
      "@vendor": "Fuji Electric Co., Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "7.8",
    "@severity": "High",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2023-002072",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU98818508/index.html",
      "@id": "JVNVU#98818508",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-31239",
      "@id": "CVE-2023-31239",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32538",
      "@id": "CVE-2023-32538",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32273",
      "@id": "CVE-2023-32273",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32201",
      "@id": "CVE-2023-32201",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32288",
      "@id": "CVE-2023-32288",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32276",
      "@id": "CVE-2023-32276",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32270",
      "@id": "CVE-2023-32270",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32542",
      "@id": "CVE-2023-32542",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-31239",
      "@id": "CVE-2023-31239",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32201",
      "@id": "CVE-2023-32201",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32270",
      "@id": "CVE-2023-32270",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32273",
      "@id": "CVE-2023-32273",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32276",
      "@id": "CVE-2023-32276",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32288",
      "@id": "CVE-2023-32288",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32538",
      "@id": "CVE-2023-32538",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32542",
      "@id": "CVE-2023-32542",
      "@source": "NVD"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/121.html",
      "@id": "CWE-121",
      "@title": "Stack-based Buffer Overflow(CWE-121)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/125.html",
      "@id": "CWE-125",
      "@title": "Out-of-bounds Read(CWE-125)"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/788.html",
      "@id": "CWE-788",
      "@title": "Access of Memory Location After End of Buffer(CWE-788)"
    }
  ],
  "title": "Multiple vulnerabilities in Fuji Electric products"
}

cve-2023-32201

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:10

Severity ?

Summary

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273.

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.673Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stack-based Buffer Overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32201",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:10:23.673Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-32270

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:10

Severity ?

Summary

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:24.423Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Access of memory location after end of buffer",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32270",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:10:24.423Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-32273

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:10

Severity ?

Summary

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:24.376Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32201."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stack-based Buffer Overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32273",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:10:24.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-32276

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:10

Severity ?

Summary

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:24.376Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stack-based Buffer Overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32276",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:10:24.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-32288

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:10

Severity ?

Summary

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution.

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:24.242Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure and/or arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32288",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:10:24.242Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-32538

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:18

Severity ?

Summary

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:18:37.623Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32273 and CVE-2023-32201."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stack-based Buffer Overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32538",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:18:37.623Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-32542

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 15:18

Severity ?

Summary

Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD.	TELLUS and TELLUS Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:18:37.864Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "TELLUS and TELLUS Lite",
          "vendor": "FUJI ELECTRIC CO., LTD.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-32542",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T15:18:37.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2023-31239

Vulnerability from cvelistv5

Published

2023-06-19 00:00

Modified

2024-08-02 14:53

Severity ?

Summary

Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having user open a specially crafted VPR file.

References

▼	URL	Tags
	https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
	https://jvn.jp/en/vu/JVNVU98818508/

Impacted products

▼	Vendor	Product
	FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	V-Server and V-Server Lite

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T14:53:30.695Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/vu/JVNVU98818508/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "V-Server and V-Server Lite",
          "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "v4.0.15.0 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having user open a specially crafted VPR file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Stack-based Buffer Overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-19T00:00:00",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php"
        },
        {
          "url": "https://jvn.jp/en/vu/JVNVU98818508/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2023-31239",
    "datePublished": "2023-06-19T00:00:00",
    "dateReserved": "2023-05-11T00:00:00",
    "dateUpdated": "2024-08-02T14:53:30.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from jvndb

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature