Vulnerability in Fujielectric Tellus
CVE-2023-47582
Access of uninitialized pointer vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code m…
EPSS: 0.003 (17.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Fujielectric Tellus
- Fujielectric Tellus_lite
- Fuji Electric Co., Ltd. And Hakko Electronics Tellus — versions V4.0.17.0 and earlier
- Fuji Electric Co., Ltd. And Hakko Electronics Tellus Lite — versions V4.0.17.0 and earlier
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (Vendor Advisory)
- vultures@jpcert.or.jp (Vendor Advisory)
- vultures@jpcert.or.jp (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-47582?
- CVE-2023-47582 is a high-severity vulnerability in Fujielectric Tellus, classified under Access of Uninitialized Pointer. CVSS score: 7.8/10. Published 2023-11-15.
- How severe is CVE-2023-47582?
- High severity. CVSS v3 base score is 7.8 out of 10.