View CSAF

Summary

Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user to system, which may then enable the attacker to cause a temporary denial of service, open files, or delete files.

The following versions of Fuji Electric Tellus are affected:

Tellus 5.0.2

CVSS Vendor Equipment Vulnerabilities

v3 7.8 Fuji Electric Fuji Electric Tellus Exposed Dangerous Method or Function

Background

Critical Infrastructure Sectors: Critical Manufacturing

Countries/Areas Deployed: Worldwide

Company Headquarters Location: Japan

Vulnerabilities

Acknowledgments

Kim Myung-gyu of Trend Micro Zero Day Initiative reported this vulnerability to CISA

Legal Notice and Terms of Use

This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).

Recommended Practices

CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability.…