CVE-2025-61860: High severity V-SFT V-SFT vulnerability
An out-of-bounds read vulnerability exists in VS6MemInIF!settemptypedefault of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61860?
CVE-2025-61860 is classified as a high-severity vulnerability due to its potential for information disclosure and arbitrary code execution.
How do I fix CVE-2025-61860?
To fix CVE-2025-61860, update your V-SFT software to version 6.2.7.1 or later.
What systems are affected by CVE-2025-61860?
CVE-2025-61860 affects V-SFT version 6.2.7.0 and earlier.
What happens if CVE-2025-61860 is exploited?
Exploitation of CVE-2025-61860 can lead to information disclosure and abnormal termination of the affected system.
How can I mitigate the risks associated with CVE-2025-61860?
Mitigation of CVE-2025-61860 involves applying available patches and restricting access to vulnerable systems until they are updated.