Details of VAR-202406-0374

ID

VAR-202406-0374

CVE

CVE-2024-37029

TITLE

Fuji Electric Tellus Lite V-Simulator 6 V9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Trust: 1.4

sources: ZDI: ZDI-24-680 // ZDI: ZDI-24-679

DESCRIPTION

Fuji Electric Tellus Lite V-Simulator is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code. (DoS) It may be in a state. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the parsing of V9 files by the V-Simulator 6 module. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process

Trust: 3.51

sources: NVD: CVE-2024-37029 // JVNDB: JVNDB-2024-009680 // ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679

AFFECTED PRODUCTS

vendor:	fuji electric	model:	tellus lite	scope:	-	version:	-	Trust: 2.1
vendor:	fujielectric	model:	tellus lite v-simulator	scope:	lt	version:	4.0.20.0	Trust: 1.0
vendor:	富士電機	model:	tellus lite v-simulator	scope:	-	version:	-	Trust: 0.8
vendor:	富士電機	model:	tellus lite v-simulator	scope:	eq	version:	4.0.20.0	Trust: 0.8
vendor:	富士電機	model:	tellus lite v-simulator	scope:	eq	version:	-	Trust: 0.8

sources: ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679 // JVNDB: JVNDB-2024-009680 // NVD: CVE-2024-37029

CVSS

SEVERITY

CVSSV2

CVSSV3

ZDI:	CVE-2024-37029
value:	HIGH
Trust: 2.1
nvd@nist.gov:	CVE-2024-37029
value:	HIGH
Trust: 1.0
ics-cert@hq.dhs.gov:	CVE-2024-37029
value:	HIGH
Trust: 1.0
NVD:	CVE-2024-37029
value:	HIGH
Trust: 0.8

ZDI:	CVE-2024-37029
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 2.1
nvd@nist.gov:	CVE-2024-37029
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
ics-cert@hq.dhs.gov:	CVE-2024-37029
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2024-37029
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679 // JVNDB: JVNDB-2024-009680 // NVD: CVE-2024-37029 // NVD: CVE-2024-37029

PROBLEMTYPE DATA

problemtype:	CWE-121	Trust: 1.0
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8

sources: JVNDB: JVNDB-2024-009680 // NVD: CVE-2024-37029

PATCH

title:

Fuji Electric has issued an update to correct this vulnerability.

url:

https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-14

Trust: 2.1

sources: ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679

EXTERNAL IDS

db:	NVD	id:	CVE-2024-37029	Trust: 4.7
db:	ICS CERT	id:	ICSA-24-165-14	Trust: 1.8
db:	JVN	id:	JVNVU96920775	Trust: 0.8
db:	JVNDB	id:	JVNDB-2024-009680	Trust: 0.8
db:	ZDI_CAN	id:	ZDI-CAN-22747	Trust: 0.7
db:	ZDI	id:	ZDI-24-681	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-22813	Trust: 0.7
db:	ZDI	id:	ZDI-24-680	Trust: 0.7
db:	ZDI_CAN	id:	ZDI-CAN-22875	Trust: 0.7
db:	ZDI	id:	ZDI-24-679	Trust: 0.7

sources: ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679 // JVNDB: JVNDB-2024-009680 // NVD: CVE-2024-37029

REFERENCES

url:	https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-14	Trust: 3.9
url:	https://jvn.jp/vu/jvnvu96920775/	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2024-37029	Trust: 0.8

sources: ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679 // JVNDB: JVNDB-2024-009680 // NVD: CVE-2024-37029

CREDITS

kimiya

Trust: 2.1

sources: ZDI: ZDI-24-681 // ZDI: ZDI-24-680 // ZDI: ZDI-24-679

SOURCES

db:	ZDI	id:	ZDI-24-681
db:	ZDI	id:	ZDI-24-680
db:	ZDI	id:	ZDI-24-679
db:	JVNDB	id:	JVNDB-2024-009680
db:	NVD	id:	CVE-2024-37029

LAST UPDATE DATE

2024-10-05T19:42:33.215000+00:00

SOURCES UPDATE DATE

db:	ZDI	id:	ZDI-24-681	date:	2024-08-15T00:00:00
db:	ZDI	id:	ZDI-24-680	date:	2024-08-15T00:00:00
db:	ZDI	id:	ZDI-24-679	date:	2024-08-15T00:00:00
db:	JVNDB	id:	JVNDB-2024-009680	date:	2024-10-04T02:23:00
db:	NVD	id:	CVE-2024-37029	date:	2024-10-03T16:43:40.713

SOURCES RELEASE DATE

db:	ZDI	id:	ZDI-24-681	date:	2024-06-13T00:00:00
db:	ZDI	id:	ZDI-24-680	date:	2024-06-13T00:00:00
db:	ZDI	id:	ZDI-24-679	date:	2024-06-13T00:00:00
db:	JVNDB	id:	JVNDB-2024-009680	date:	2024-10-04T00:00:00
db:	NVD	id:	CVE-2024-37029	date:	2024-06-13T18:15:10.790