CVE-2024-38309

HIGH

V-SFT <= 6.2.2.0 and TELLUS <= 4.0.19.0 - Stack-based Buffer Overflow

Title source: llm
STIX 2.1

Description

There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and earlier), and TELLUS Lite (v4.0.19.0 and earlier). If a user opens a specially crafted file, information may be disclosed and/or arbitrary code may be executed.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0021
EPSS Percentile 10.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-121
Status published
Products (3)
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd./TELLUS v4.0.19.0 and earlier
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd./TELLUS Lite v4.0.19.0 and earlier
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd./V-SFT v6.2.2.0 and earlier
Published Nov 28, 2024
Tracked Since Feb 18, 2026