PT-2023-7338

CVE-2023-5299

·

Publicado

2023-06-07

·

Atualizado

2024-09-04

Descrição por

CVSS 3.1
8.8
Alta
MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fuji Electric Tellus Lite V-Simulator (affected versions not specified)
Description The issue is related to inadequate access control in the Fuji Electric Tellus Lite V-Simulator, allowing an attacker to potentially execute arbitrary code. A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system, which could lead to further exploitation.
Recommendations For Fuji Electric Tellus Lite V-Simulator, consider restricting access to sensitive system files to prevent unauthorized modifications until a patch is available. As a temporary workaround, limit the privileges of standard accounts to minimize the risk of exploitation. Avoid using the vulnerable default permissions in Fuji Electric Tellus Lite until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾