CVE-2023-47582

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Access of uninitialized pointer vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file (X1, V8, or V9 file), information may be disclosed and/or arbitrary code may be executed.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-824

Affected software

Vendor	Product	Versions
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS	V4.0.17.0 and earlier
FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd.	TELLUS Lite	V4.0.17.0 and earlier

References

https://hakko-elec.co.jp/site/download/03tellus_inf/index.phpVendor Advisory
https://jvn.jp/en/vu/JVNVU93840158/Third Party Advisory
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.phpVendor Advisory
https://hakko-elec.co.jp/site/download/03tellus_inf/index.phpVendor Advisory
https://jvn.jp/en/vu/JVNVU93840158/Third Party Advisory
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/index.phpVendor Advisory

Timeline

Published: Nov 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-475837.8Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially crafted file (X1 or CVE-2023-475847.8Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a specia CVE-2023-475857.8Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a user opens a special CVE-2023-475867.8Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a us CVE-2023-47598.8Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a speci CVE-2023-47609.8In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload compon CVE-2023-476098.8SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or ob CVE-2023-47618.1Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer pro CVE-2023-476109.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthentic CVE-2023-476117.8A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, T CVE-2023-476126.1A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit CVE-2023-476137.1A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Ci