CVE-2021-22655

HIGH

Fujielectric V-Server and V-Simulator < 4.0.10.0 - Out-of-bounds Read via Project File Processing

Title source: llm
STIX 2.1

Description

Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

References (1)

Core 1
Core References
Third Party Advisory, US Government Resource x_refsource_misc
https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01

Scores

CVSS v3 7.8
EPSS 0.0119
EPSS Percentile 64.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (2)
fujielectric/v-server < 4.0.10.0
fujielectric/v-simulator < 4.0.10.0
Published Jan 27, 2021
Tracked Since Feb 18, 2026