ZDI-25-1064: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-1064?
The severity of ZDI-25-1064 is significant, as it allows remote code execution on affected installations.
How do I fix ZDI-25-1064?
To fix ZDI-25-1064, it is recommended to update the affected Fuji Electric Monitouch V-SFT software to the latest version.
What are the risks associated with ZDI-25-1064?
The risks of ZDI-25-1064 include potential unauthorized access and control over the affected installations, leading to data breaches or system damage.
What is required to exploit ZDI-25-1064?
Exploitation of ZDI-25-1064 requires user interaction, meaning the target must visit a malicious page or open a malicious file.
Which products are affected by ZDI-25-1064?
ZDI-25-1064 affects the Fuji Electric Monitouch V-SFT software, making it crucial for users of the product to take immediate action.