CVE-2022-46360

2023-01-0300:00:00

jpcert

www.cve.org

v-sft

tellus

out-of-bounds read

vulnerability

image file

local attacker

execute arbitrary code

0.001 Low

EPSS

Percentile

31.7%

JSON

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.

CNA Affected

[
  {
    "vendor": "FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.",
    "product": "V-SFT and TELLUS",
    "versions": [
      {
        "version": "V-SFT v6.1.7.0 and earlier, and TELLUS v4.0.12.0 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU90679513/index.html

monitouch.fujielectric.com/site/download-e/09vsft6_inf/index.php

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for CVELIST:CVE-2022-46360