QwikSec

Security Database

CVE

CWE

Training

CVE-2021-22639

Published: Jan 27, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0).

Vendor	Product	Versions
n/a	Tellus Lite V-Simulator and V-Server Lite	affected `Versions prior to 4.0.10.0`

Weaknesses (CWE)

References

https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01

x_refsource_MISC

https://www.zerodayinitiative.com/advisories/ZDI-21-098/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.