ZDI-CAN-27352: ZDI-25-1066: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Dec 10, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526.

Affected Software

1 affected component

Fuji Electric Monitouch V-SFT

Event History

Dec 10, 2025

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27352?

The severity of ZDI-CAN-27352 is high due to the potential for remote code execution.

How do I fix ZDI-CAN-27352?

To mitigate ZDI-CAN-27352, update your Fuji Electric Monitouch V-SFT software to the latest version provided by the vendor.

What type of exploit is associated with ZDI-CAN-27352?

ZDI-CAN-27352 allows remote attackers to execute arbitrary code requiring user interaction.

What are the potential impacts of ZDI-CAN-27352?

If exploited, ZDI-CAN-27352 can lead to unauthorized access and control over affected systems.

Is user interaction required to exploit ZDI-CAN-27352?

Yes, user interaction is necessary as the target must engage with a malicious page or file.