← Back to home
ICSA-24-338-06  ·  Published 2025-07-29  ·  View on CISA ICS-CERT ↗

Fuji Electric Tellus Lite V-Simulator (Update A)

CVSS 7.8 HIGH

Risk Summary

Successful exploitation of these vulnerabilities could crash the device being accessed.

Remediations

  • VS5Sim is a simulator of V-SFT Ver5 packaged with TELLUS Lite. VS6Sim screens incoming data to prevent malicious files from exploiting CVE-2024-11799, CVE-2024-11800, and CVE-2024-11801. Fuji Electric has replaced V-SFT Ver5 with V-SFT Ver6 in new versions of TELLUS lite.
  • In May 2025, Fuji Electric released TELLUS V4.0.22.0 which fixes CVE-2024-11802 and CVE-2024-11803 in V-Simulator Ver6. Consequently, V-Simulator Ver5 will be removed from the package and replaced with V-Simulator Ver6. Users are encouraged to download the latest version.

Affected Vendors

Fuji Electric

Affected Products (1)

Fuji Electric · Tellus Lite 4.0.20.0

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more