Vulnerability Details CVE-2023-47580
Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.5%
CVSS Severity
CVSS v3 Score 7.8
References
- https://hakko-elec.co.jp/site/download/03tellus_inf/index.php
- https://jvn.jp/en/vu/JVNVU93840158/
- https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
- https://hakko-elec.co.jp/site/download/03tellus_inf/index.php
- https://jvn.jp/en/vu/JVNVU93840158/
- https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.php
Products affected by CVE-2023-47580
-
cpe:2.3:a:fujielectric:tellus:-
-
cpe:2.3:a:fujielectric:tellus:4.0.12.0
-
cpe:2.3:a:fujielectric:tellus:4.0.15.0
-
cpe:2.3:a:fujielectric:tellus:4.0.17.0
-
cpe:2.3:a:fujielectric:tellus_lite:4.0.15.0