CVE-2025-54496: Fuji Electric Monitouch V-SFT-6 Heap-based Buffer Overflow
Published Nov 4, 2025
·Updated
A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which may allow the attacker to execute arbitrary code.
Affected Software
3 affected components
Fuji Electric Monitouch V-SFT-6
: Fuji Electric Fuji Electric Monitouch V-SFT-6=6.2.7.0
Fujielectric Monitouch V-sft>=6.2.7.0<6.2.9.0
Remediation
Information
Fuji Electric has addressed these vulnerabilities in their October release (V-SFT V6.2.8.0). They recommend users update to V6.2.9.0 or newer. https://felib.fujielectric.co.jp/en/document_search
Event History
Nov 4, 2025
CVE Published
via MITRE·09:36 PM
Data Sourced
via MITRE·09:36 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via ICS·09:46 PM
SeverityWeaknessAffected Software
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-54496?
CVE-2025-54496 is considered a critical vulnerability due to its potential to allow arbitrary code execution via a heap-based buffer overflow.
2
How do I fix CVE-2025-54496?
To mitigate CVE-2025-54496, update the Fuji Electric Monitouch V-SFT-6 software to the latest version provided by the vendor.
3
What affects CVE-2025-54496?
CVE-2025-54496 affects the Fuji Electric Monitouch V-SFT-6, specifically version 6.2.7.0.
4
What type of vulnerability is CVE-2025-54496?
CVE-2025-54496 is classified as a heap-based buffer overflow vulnerability.
5
What can an attacker achieve with CVE-2025-54496?
An attacker exploiting CVE-2025-54496 could execute arbitrary code on the affected system.