Severity
High
Analysis Summary
CVE-2022-3087 CVSS:7.8
Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to an out-of-bounds write which may allow an attacker to execute arbitrary code.
CVE-2022-3085 CVSS:7.8
Fuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based buffer overflow which may allow an attacker to execute arbitrary code.
Impact
- Arbitrary Code Execution
Indicators Of Compromise
CVE
- CVE-2022-3087
- CVE-2022-3085
Affected Vendors
Fuji Electric
Affected Products
- Fuji Electric Tellus Lite V-Simulator 4.0.10.0
- Fuji Electric Tellus Lite V-Simulator 4.0.12.0
Remediation
Refer to CISA-CERT Advisory for the patch, upgrade, or suggested workaround information.