Out-of-bounds read in V-Server Lite and Tellus Lite V-Simulator - CVE-2021-38421

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the parsing of V8 files within the V-Simulator module. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system, or perform a denial of service (DoS) attack.

Affected software

How to mitigate CVE-2021-38421

External References

• https://ics-cert.us-cert.gov/advisories/icsa-21-299-01
• https://www.zerodayinitiative.com/advisories/ZDI-21-1264/

Related Security Bulletins

• Multiple vulnerabilities in Fuji Electric Tellus Lite V-Simulator and V-Server Lite