PT-2024-4829 · Fuji Electric · Fuji Electric Tellus Lite V-Simulator

Kimya · Published 2024-06-13 · Updated 2024-10-03 · CVE-2024-37022

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Fuji Electric Tellus Lite V-Simulator versions 6 X1 and earlier

Description: The issue is related to an out-of-bounds write operation in memory, which could allow an attacker to manipulate memory and execute arbitrary code. This could potentially result in the execution of malicious code by an attacker.

Recommendations: For Fuji Electric Tellus Lite V-Simulator version 6 X1, update to a version that fixes the out-of-bounds write issue to prevent potential code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2024-05353

CVE-2024-37022

ZDI-24-678

Affected Products

Fuji Electric Tellus Lite V-Simulator

References · 9

• https://osv.dev/vulnerability/CVE-2024-37022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-37022 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-678 · Security Note
• https://bdu.fstec.ru/vul/2024-05353 · Security Note
• https://twitter.com/CVEnew/status/1801311427044774336 · Twitter Post
• https://felib.fujielectric.co.jp/en/M10009/M20034/document_detail/a1f9328f-82f4-434a-b593-32874d1e897d · Note
• https://twitter.com/CveFindCom/status/1801314047276495304 · Twitter Post
• https://t.me/cvenotify/96937 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-165-14 · Note