ZDI-CAN-27358: ZDI-25-1067: Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Dec 10, 2025

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-54526.

Affected Software

1 affected component

Fuji Electric Monitouch V-SFT

Event History

Dec 10, 2025

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27358?

The severity of ZDI-CAN-27358 is critical due to its potential for remote code execution.

How do I fix ZDI-CAN-27358?

To fix ZDI-CAN-27358, users should update their Fuji Electric Monitouch V-SFT to the latest patched version.

What is the impact of ZDI-CAN-27358?

ZDI-CAN-27358 allows remote attackers to execute arbitrary code, leading to potential data breaches or system compromise.

Is user interaction required to exploit ZDI-CAN-27358?

Yes, user interaction is required for ZDI-CAN-27358, as the target must visit a malicious page or open a malicious file.

What versions of Fuji Electric Monitouch V-SFT are affected by ZDI-CAN-27358?

ZDI-CAN-27358 affects all versions of Fuji Electric Monitouch V-SFT that are not updated with the security patch.