Fujielectric V-Server vulnerabilities

CVE-2021-38401 [HIGH] CWE-822 CVE-2021-38401: Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untru Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.

CVE-2022-29506 [HIGH] CWE-125 CVE-2022-29506: Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SF Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.

CVE-2023-47585 [HIGH] CWE-125 CVE-2023-47585: Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18. Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specially crafted VPR file, information may be disclosed and/or arbitrary code may be executed.

CVE-2022-47317 [HIGH] CWE-787 CVE-2022-47317: Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtai Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

CVE-2020-10646 [HIGH] CWE-122 CVE-2020-10646: Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small.

CVE-2021-38409 [HIGH] CWE-824 CVE-2021-38409: Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an acces Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an access of uninitialized pointer, which may allow an attacker read from or write to unexpected memory locations, leading to a denial-of-service.

CVE-2022-41645 [HIGH] CWE-125 CVE-2022-41645: Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

CVE-2022-47908 [HIGH] CWE-787 CVE-2022-47908: Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.

CVE-2021-38421 [HIGH] CWE-125 CVE-2021-38421: Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-o Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from other memory locations or cause a crash.