Machine-generated analysis · WAYSCloud LLM
The vulnerability involves a kernel driver installed with Tellus that grants all users read and write permissions. This is a privilege escalation issue specific to version 5.0.2.
Context
Fuji Electric Tellus is a product used in critical manufacturing sectors, deployed worldwide. The advisory states that exploitation could allow privilege escalation from user to system, potentially leading to denial of service, file access, or deletion. The issue is due to a kernel driver installed with the software that provides excessive permissions to all users. The vendor recommends installing Tellus only with administrator privileges as a mitigation.
Operator considerations
Check: Inventory installations of Fuji Electric Tellus version 5.0.2.
Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user to system, which may then enable the attacker to cause a temporary denial of service, open files, or delete files.
Read the full advisory on CISA →