CVE-2022-3085
Assigner: icscert
Published: 2023-01-18T23:22:02.789Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Tellus Lite V-Simulator
vendor: Fuji Electric
versions: lessThanOrEqual:  4.0.12.0
status: affected
version: 0
versionType: custom
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Kimiya
type: reporter
user: 00000000-0000-4000-9000-000000000000
value: Trend Micro Zero Day Initiative
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code.</span>


value: 
Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-121
description: CWE-121 Stack-Based Buffer Overflow
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<p>Fuji Electric recommends users update Tellus Lite V-Simulator to <a target="_blank" rel="nofollow" href="https://felib.fujielectric.co.jp/download/pod_document.htm?site=global&amp;lang=en">version 4.0.15.0</a>. </p><br>

<br>
value: 
Fuji Electric recommends users update Tellus Lite V-Simulator to  version 4.0.15.0 https://felib.fujielectric.co.jp/download/pod_document.htm . 






source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev