PT-2021-5237 · Fuji Electric · Tellus Lite V-Simulator+1

Kimiya + 1 · Published 2021-10-26 · Updated 2021-12-27 · CVE-2021-38409

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server Lite and Tellus Lite V-Simulator versions prior to 4.0.12.0

Description The issue is related to the use of an uninitialized pointer, which may allow an attacker to read from or write to unexpected memory locations. This can lead to a denial-of-service.

Recommendations For Fuji Electric V-Server Lite and Tellus Lite V-Simulator versions prior to 4.0.12.0, update to version 4.0.12.0 or later to resolve the issue.

Fix

Access of Uninitialized Pointer

Weakness Enumeration

CWE-824

Related Identifiers

BDU:2021-06039

CVE-2021-38409

Affected Products

Tellus Lite V-Simulator

V-Server Lite

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-38409 · Security Note
• https://bdu.fstec.ru/vul/2021-06039 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38409 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-21-299-01 · Patch
• https://us-cert.cisa.gov/ics/advisories/icsa-21-299-01 · Note
• https://t.me/cvenotify/24672 · Telegram Post