Fujielectric V-Server vulnerabilities

CVE-2019-18240 [CRITICAL] CWE-122 CVE-2019-18240: In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, In Fuji Electric V-Server 4.0.6 and prior, several heap-based buffer overflows have been identified, which may allow an attacker to remotely execute arbitrary code.

CVE-2019-3947 [CRITICAL] CWE-522 CVE-2019-3947: Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An Fuji Electric V-Server before 6.0.33.0 stores database credentials in project files as plaintext. An attacker that can gain access to the project file can recover the database credentials and gain access to the database server.

CVE-2017-9639 [HIGH] CWE-119 CVE-2017-9639: An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vu An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memory buffer), which may allow remote code execution.

CVE-2021-22639 [HIGH] CWE-824 CVE-2021-22639: An uninitialized pointer issue has been identified in the way the application processes project file An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CVE-2019-3946 [HIGH] CWE-190 CVE-2019-3946: Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message Fuji Electric V-Server before 6.0.33.0 is vulnerable to denial of service via a crafted UDP message sent to port 8005. An unauthenticated, remote attacker can crash vserver.exe due to an integer overflow in the UDP message handling logic.

CVE-2021-22637 [HIGH] CWE-121 CVE-2021-22637: Multiple stack-based buffer overflow issues have been identified in the way the application processe Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CVE-2021-22653 [HIGH] CWE-787 CVE-2021-22653: Multiple out-of-bounds write issues have been identified in the way the application processes projec Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CVE-2020-25171 [HIGH] CWE-787 CVE-2020-25171: The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-boun The affected Fuji Electric V-Server Lite versions prior to 3.3.24.0 are vulnerable to an out-of-bounds write, which may allow an attacker to remotely execute arbitrary code.

CVE-2023-47586 [HIGH] CWE-787 CVE-2023-47586: Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Se Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

CVE-2021-22641 [HIGH] CWE-122 CVE-2021-22641: A heap-based buffer overflow issue has been identified in the way the application processes project A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CVE-2021-22655 [HIGH] CWE-125 CVE-2021-22655: Multiple out-of-bounds read issues have been identified in the way the application processes project Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

CVE-2021-38419 [HIGH] CWE-787 CVE-2021-38419: Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-o Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds write, which can result in data corruption, a system crash, or code execution.

CVE-2022-29524 [HIGH] CWE-787 CVE-2022-29524: Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13 Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

CVE-2023-47584 [HIGH] CWE-787 CVE-2023-47584: Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18 Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

CVE-2018-10637 [HIGH] CWE-120 CVE-2018-10637: A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to exec A maliciously crafted project file may cause a buffer overflow, which may allow the attacker to execute arbitrary code that affects Fuji Electric V-Server Lite 4.0.3.0 and prior.

CVE-2021-38413 [HIGH] CWE-121 CVE-2021-38413: Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack- Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to a stack-based buffer overflow, which may allow an attacker to achieve code execution.

CVE-2021-38415 [HIGH] CWE-122 CVE-2021-38415: Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-base Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.

CVE-2022-30549 [HIGH] CWE-125 CVE-2022-30549: Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13. Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

CVE-2022-29522 [HIGH] CWE-416 CVE-2022-29522: Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

CVE-2023-31239 [HIGH] CWE-125 CVE-2023-31239: Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earl Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having user open a specially crafted VPR file.