Fuji Electric Tellus Lite V-Simulator

An attacker with local access to a system running Tellus Lite V-Simulator could execute arbitrary code, potentially gaining control of the engineering workstation and any connected control systems or configuration tools.

Energy sector operators and system integrators using Fuji Electric Tellus Lite V-Simulator, primarily engineering and maintenance staff on workstations where the simulation and configuration tool is installed.

An attacker must deceive a user into opening a malicious email attachment or link on a system where Tellus Lite V-Simulator is installed. The vulnerability (buffer overflow/out-of-bounds write) is triggered when processing the malicious file, allowing code execution with user privileges. This is typically a social engineering attack vector combined with the local code execution flaw.