Details of VAR-202311-1678

ID

VAR-202311-1678

CVE

CVE-2023-35127

TITLE

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Trust: 7.7

sources: ZDI: ZDI-23-1734 // ZDI: ZDI-23-1733 // ZDI: ZDI-23-1732 // ZDI: ZDI-23-1731 // ZDI: ZDI-23-1728 // ZDI: ZDI-23-1727 // ZDI: ZDI-23-1726 // ZDI: ZDI-23-1723 // ZDI: ZDI-23-1722 // ZDI: ZDI-23-1721 // ZDI: ZDI-23-1720

DESCRIPTION

Stack-based buffer overflow may occur when Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file. Fuji Electric's Tellus Lite V-Simulator Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the processing of V9 files by the V-Simulator 6 module. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process

Trust: 8.64

sources: NVD: CVE-2023-35127 // JVNDB: JVNDB-2023-018332 // ZDI: ZDI-23-1734 // ZDI: ZDI-23-1733 // ZDI: ZDI-23-1732 // ZDI: ZDI-23-1731 // ZDI: ZDI-23-1728 // ZDI: ZDI-23-1727 // ZDI: ZDI-23-1726 // ZDI: ZDI-23-1723 // ZDI: ZDI-23-1722 // ZDI: ZDI-23-1721 // ZDI: ZDI-23-1720 // VULMON: CVE-2023-35127

AFFECTED PRODUCTS

vendor:	fuji electric	model:	tellus lite	scope:	-	version:	-	Trust: 7.7
vendor:	fujielectric	model:	tellus lite v-simulator	scope:	lt	version:	4.0.19.0	Trust: 1.0
vendor:	富士電機	model:	tellus lite v-simulator	scope:	-	version:	-	Trust: 0.8
vendor:	富士電機	model:	tellus lite v-simulator	scope:	eq	version:	-	Trust: 0.8
vendor:	富士電機	model:	tellus lite v-simulator	scope:	eq	version:	4.0.19.0	Trust: 0.8

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2023-35127
value:	HIGH
Trust: 7.7
nvd@nist.gov:	CVE-2023-35127
value:	HIGH
Trust: 1.0
ics-cert@hq.dhs.gov:	CVE-2023-35127
value:	HIGH
Trust: 1.0
NVD:	CVE-2023-35127
value:	HIGH
Trust: 0.8

ZDI:	CVE-2023-35127
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 7.7
nvd@nist.gov:	CVE-2023-35127
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 2.0
NVD:	CVE-2023-35127
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	CWE-787	Trust: 1.0
problemtype:	Out-of-bounds writing (CWE-787) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2023-018332 // NVD: CVE-2023-35127

PATCH

title:

Fuji Electric has issued an update to correct this vulnerability.

url:

https://www.cisa.gov/news-events/ics-advisories/icsa-23-325-02

Trust: 7.7

EXTERNAL IDS

db:	NVD	id:	CVE-2023-35127	Trust: 10.4
db:	ICS CERT	id:	ICSA-23-325-02	Trust: 1.9
db:	JVN	id:	JVNVU98886797	Trust: 0.8
db:	JVNDB	id:	JVNDB-2023-018332	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-21214	Trust: 0.7
db:	ZDI	id:	ZDI-23-1734	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21304	Trust: 0.7
db:	ZDI	id:	ZDI-23-1733	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21303	Trust: 0.7
db:	ZDI	id:	ZDI-23-1732	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21302	Trust: 0.7
db:	ZDI	id:	ZDI-23-1731	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21236	Trust: 0.7
db:	ZDI	id:	ZDI-23-1728	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21176	Trust: 0.7
db:	ZDI	id:	ZDI-23-1727	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21178	Trust: 0.7
db:	ZDI	id:	ZDI-23-1726	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21175	Trust: 0.7
db:	ZDI	id:	ZDI-23-1723	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21174	Trust: 0.7
db:	ZDI	id:	ZDI-23-1722	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21215	Trust: 0.7
db:	ZDI	id:	ZDI-23-1721	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-21121	Trust: 0.7
db:	ZDI	id:	ZDI-23-1720	Trust: 0.7
db:	VULMON	id:	CVE-2023-35127	Trust: 0.1

REFERENCES

url:	https://www.cisa.gov/news-events/ics-advisories/icsa-23-325-02	Trust: 9.7
url:	https://felib.fujielectric.co.jp/en/m10009/m20034/document_detail/c27d5b69-68ef-4af5-90ee-b5dab118f71a	Trust: 1.9
url:	https://jvn.jp/vu/jvnvu98886797/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-35127	Trust: 0.8
url:	https://nvd.nist.gov	Trust: 0.1

CREDITS

kimiya

Trust: 7.7

SOURCES

db:	ZDI	id:	ZDI-23-1734
db:	ZDI	id:	ZDI-23-1733
db:	ZDI	id:	ZDI-23-1732
db:	ZDI	id:	ZDI-23-1731
db:	ZDI	id:	ZDI-23-1728
db:	ZDI	id:	ZDI-23-1727
db:	ZDI	id:	ZDI-23-1726
db:	ZDI	id:	ZDI-23-1723
db:	ZDI	id:	ZDI-23-1722
db:	ZDI	id:	ZDI-23-1721
db:	ZDI	id:	ZDI-23-1720
db:	VULMON	id:	CVE-2023-35127
db:	JVNDB	id:	JVNDB-2023-018332
db:	NVD	id:	CVE-2023-35127

LAST UPDATE DATE

2024-08-14T14:30:09.043000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-23-1734	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1733	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1732	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1731	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1728	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1727	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1726	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1723	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1722	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1721	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1720	date:	2023-11-27T00:00:00
db:	VULMON	id:	CVE-2023-35127	date:	2023-11-22T00:00:00
db:	JVNDB	id:	JVNDB-2023-018332	date:	2024-01-11T02:46:00
db:	NVD	id:	CVE-2023-35127	date:	2023-11-30T17:24:26.147

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-23-1734	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1733	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1732	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1731	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1728	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1727	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1726	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1723	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1722	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1721	date:	2023-11-27T00:00:00
db:	ZDI	id:	ZDI-23-1720	date:	2023-11-27T00:00:00
db:	VULMON	id:	CVE-2023-35127	date:	2023-11-22T00:00:00
db:	JVNDB	id:	JVNDB-2023-018332	date:	2024-01-11T00:00:00
db:	NVD	id:	CVE-2023-35127	date:	2023-11-22T01:15:07.813