CVE-2022-46360

Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.

Score

CVSS 3.1 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2023-01-03

Last modified

2025-04-10

Weaknesses

CWE-125

Affected products

• V-sft And Tellus (Fuji Electric Co. Ltd. And Hakko Electronics Co. Ltd.)
• Tellus (Fujielectric)
• V-sft (Fujielectric)

References

• https://jvn.jp/en/vu/JVNVU90679513/index.html
• https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/index.php