ZDI-25-1065: Fuji Electric Monitouch V-SFT V7 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54496.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-1065?
The severity of ZDI-25-1065 is critical, as it allows remote attackers to execute arbitrary code with user interaction.
How do I mitigate ZDI-25-1065?
To mitigate ZDI-25-1065, ensure that users do not visit malicious pages or open potentially harmful files.
What versions of Fuji Electric Monitouch V-SFT are affected by ZDI-25-1065?
ZDI-25-1065 affects Fuji Electric Monitouch V-SFT version V7.
Is user interaction required to exploit ZDI-25-1065?
Yes, user interaction is required to exploit ZDI-25-1065 by visiting a malicious page or opening a malicious file.
What action should I take if I am running an affected version of Fuji Electric Monitouch?
If running an affected version, it is crucial to apply security updates and educate users on the risks of interacting with untrusted content.