CVE-2023-32270

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-125

Affected software

Vendor	Product	Versions
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS and TELLUS Lite	v4.0.15.0 and earlier

References

https://jvn.jp/en/vu/JVNVU98818508/Third Party Advisory
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.phpRelease Notes
https://jvn.jp/en/vu/JVNVU98818508/Third Party Advisory
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.phpRelease Notes

Timeline

Published: Jun 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-322716.5An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Plat CVE-2023-322725.5Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an aut CVE-2023-322737.8Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may le CVE-2023-322747.5Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exp CVE-2023-322754.4An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially craf CVE-2023-322767.8Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead CVE-2023-322776.1Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticated user to potential CVE-2023-322787.3Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver i CVE-2023-322797.5Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthent CVE-2023-32285.7Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.CVE-2023-322805.3Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated CVE-2023-322817.8The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-