Back to Database
Status published
High
CVE-2021-38415
Fuji Electric Tellus Lite V-Simulator heap based buffer overflow
Vulnerability Description
Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable a heap-based buffer overflow when parsing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-38415
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- kimiya, working with Trend Micro’s Zero Day Initiative, and Michael Heinzl reported these vulnerabilities to CISA.
More from Fuji Electric
View All →CVE-2025-9365
Fuji Electric FRENIC-Loader 4 Deserialization of Untrusted Data
High
8.4
CVE-2025-54526
Fuji Electric Monitouch V-SFT-6 Stack-based Buffer Overflow
High
8.4
CVE-2025-54496
Fuji Electric Monitouch V-SFT-6 Heap-based Buffer Overflow
High
8.4
CVE-2025-53524
Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write
High
8.4
CVE-2025-41413
Fuji Electric Smart Editor Out-of-bounds Write
High
8.4
Affected Vendor
Fuji Electric
View all reports →Affected Software
V-Server Lite, Tellus Lite V-Simulator
Vulnerable Versions:
unspecified
Timeline
Official Publish:
December 20th, 2021
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H