PT-2022-6657 · Fuji Electric · Fuji Electric Tellus Lite V-Simulator

Kimiya · Published 2022-12-20 · Updated 2023-06-08 · CVE-2022-3087

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior

Description The issue is related to an out-of-bounds write in memory, which may allow an attacker to execute arbitrary code. This can be exploited by an attacker to gain unauthorized access and control.

Recommendations For Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior, update to a version later than 4.0.12.0 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2023-03151

CVE-2022-3087

ZDI-23-819

ZDI-23-820

ZDI-23-822

ZDI-23-823

Affected Products

Fuji Electric Tellus Lite V-Simulator

References · 12

• https://zerodayinitiative.com/advisories/ZDI-23-823 · Security Note
• https://bdu.fstec.ru/vul/2023-03151 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/688415/?sphrase_id=45530 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-3087 · Security Note
• https://osv.dev/vulnerability/CVE-2022-3087 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-822 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-820 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-23-819 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-22-354-01 · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-354-01 · Note
• https://vuldb.com/ru/?id.216447 · Note
• https://t.me/cvenotify/42118 · Telegram Post