PT-2023-7338
CVE-2023-5299
·
Published
2023-06-07
·
Updated
2024-09-04
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Fuji Electric Tellus Lite V-Simulator (affected versions not specified)
Description
The issue is related to inadequate access control in the Fuji Electric Tellus Lite V-Simulator, allowing an attacker to potentially execute arbitrary code. A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system, which could lead to further exploitation.
Recommendations
For Fuji Electric Tellus Lite V-Simulator, consider restricting access to sensitive system files to prevent unauthorized modifications until a patch is available.
As a temporary workaround, limit the privileges of standard accounts to minimize the risk of exploitation.
Avoid using the vulnerable default permissions in Fuji Electric Tellus Lite until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾