CVE-2021-22639

Name of the Vulnerable Software and Affected Versions Tellus Lite V-Simulator versions prior to 4.0.10.0 V-Server Lite versions prior to 4.0.10.0

Description An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution.

Recommendations For versions prior to 4.0.10.0, update to version 4.0.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of project files from untrusted sources until a patch is available.