CVE-2025-9365: Fuji Electric FRENIC-Loader 4 Deserialization of Untrusted Data
Published Sep 3, 2025
·Updated
Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a specified window, which may allow an attacker to execute arbitrary code.
Affected Software
2 affected componentsFixes available
Fuji Electric FRENIC-Loader 4
: Fuji Electric FRENIC-Loader 4<1.4.0.1
1.4.0.1
Remediation
Information
Fuji Electric recommends users update to v1.4.0.1 or later https://felib.fujielectric.co.jp/en/M10009/M20029/document_detail/b2f23970-e560-4961-8013-fc72be43681a .
Event History
Sep 3, 2025
CVE Published
via MITRE·07:34 PM
Data Sourced
via MITRE·07:34 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via ICS·07:41 PM
SeverityWeaknessAffected Software
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeakness
Feb 28, 57989
Event
via FIRST·08:51 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-9365?
CVE-2025-9365 is considered a critical vulnerability due to its potential to allow arbitrary code execution.
2
How do I fix CVE-2025-9365?
To fix CVE-2025-9365, update Fuji Electric FRENIC-Loader 4 to version 1.4.0.1 or later.
3
What type of vulnerability is CVE-2025-9365?
CVE-2025-9365 is a deserialization of untrusted data vulnerability.
4
Which software versions are affected by CVE-2025-9365?
CVE-2025-9365 affects all versions of Fuji Electric FRENIC-Loader 4 prior to version 1.4.0.1.
5
What can an attacker do with CVE-2025-9365?
An attacker can execute arbitrary code by exploiting CVE-2025-9365 when importing certain files.