PT-2024-4828 · Fuji Electric · Fuji Electric Tellus Lite V-Simulator

Kimya · Published 2024-06-13 · Updated 2024-10-03 · CVE-2024-37029

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Fuji Electric Tellus Lite V-Simulator versions 6 V9 through 6 V10

Description: The issue is related to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. This overflow occurs during file parsing.

Recommendations: For versions 6 V9 through 6 V10, update to a version that includes a fix for the stack-based buffer overflow vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2024-05352

CVE-2024-37029

ZDI-24-679

ZDI-24-680

ZDI-24-681

Affected Products

Fuji Electric Tellus Lite V-Simulator

References · 10

• https://zerodayinitiative.com/advisories/ZDI-24-680 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-679 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-681 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-37029 · Security Note
• https://bdu.fstec.ru/vul/2024-05352 · Security Note
• https://osv.dev/vulnerability/CVE-2024-37029 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1801314041991737595 · Twitter Post
• https://twitter.com/CVEnew/status/1801311428131037221 · Twitter Post
• https://felib.fujielectric.co.jp/en/M10009/M20034/document_detail/a1f9328f-82f4-434a-b593-32874d1e897d · Note
• https://cisa.gov/news-events/ics-advisories/icsa-24-165-14 · Note