ZDI-CAN-27438: ZDI-25-1101: Fuji Electric Monitouch V-SFT V7 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-53524.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-27438?
The severity of ZDI-CAN-27438 is high due to its potential for remote code execution.
How do I fix ZDI-CAN-27438?
To fix ZDI-CAN-27438, ensure that you update your Fuji Electric Monitouch V-SFT to the latest version that addresses this vulnerability.
What software versions are affected by ZDI-CAN-27438?
ZDI-CAN-27438 specifically affects Fuji Electric Monitouch V-SFT version 7.
What type of attack vectors are associated with ZDI-CAN-27438?
ZDI-CAN-27438 can be exploited through user interaction, requiring targets to visit malicious pages or open harmful files.
Is user interaction required to exploit ZDI-CAN-27438?
Yes, user interaction is required to exploit ZDI-CAN-27438 as attackers need the target to engage with a malicious file or webpage.