CVE-2025-54496

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-54496
A maliciously crafted project file may cause a heap-based buffer overflow in Fuji Electric Monitouch V-SFT-6, which may allow the attacker to execute arbitrary code.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb Product
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*
History

12 Nov 2025, 17:17

Type Values Removed Values Added
References () https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb - () https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb - Product
References () https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json - () https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json - Third Party Advisory
References () https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01 - () https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01 - Third Party Advisory, US Government Resource
CPE cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*
First Time Fujielectric monitouch V-sft
Fujielectric

04 Nov 2025, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-04 22:16

Updated : 2025-11-12 17:17

NVD link : CVE-2025-54496

Mitre link : CVE-2025-54496

CVE.ORG link : CVE-2025-54496

JSON object : View

Products Affected

fujielectric

  • monitouch_v-sft
CWE
CWE-122

Heap-based Buffer Overflow