Vulnerabilities (CVE)

Filtered by vendor Fujielectric Subscribe
Total 110 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-47760 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6MemInIF!set_temp_type_default function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47759 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47758 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with stack-based buffer overflow in VS6File!CTxSubFile::get_ProgramFile_name function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47757 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6MemInIF.dll!set_plc_type_default function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47756 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CGamenDataRom::set_mr400_strc function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47755 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!VS4_SaveEnvFile function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47754 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!Conv_Macro_Data function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47753 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds read in VS6EditData!CDrawSLine::GetRectArea function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47752 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6ComFile!MakeItemGlidZahyou function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47751 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6EditData!CDataRomErrorCheck::MacroCommandCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47750 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with out-of-bounds write in VS6MemInIF!set_temp_type_default function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2025-47749 1 Fujielectric 1 Monitouch V-sft 2025-05-19 N/A 7.8 HIGH
V-SFT v6.2.5.0 and earlier contains an issue with free of pointer not at start of buffer in VS6EditData.dll!CWinFontInf::WinFontMsgCheck function. Opening specially crafted V7 or V8 files may lead to crash, information disclosure, and arbitrary code execution.
CVE-2017-9659 1 Fujielectric 1 Monitouch V-sft 2025-04-20 6.8 MEDIUM 8.8 HIGH
A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution.
CVE-2017-9662 1 Fujielectric 1 Monitouch V-sft 2025-04-20 4.6 MEDIUM 5.3 MEDIUM
An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges.
CVE-2017-9660 1 Fujielectric 1 Monitouch V-sft 2025-04-20 6.8 MEDIUM 8.8 HIGH
A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution.
CVE-2017-9639 1 Fujielectric 1 V-server 2025-04-20 7.5 HIGH 7.3 HIGH
An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memory buffer), which may allow remote code execution.
CVE-2022-43448 1 Fujielectric 2 Tellus, V-sft 2025-04-10 N/A 7.8 HIGH
Out-of-bounds write vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.
CVE-2022-46360 1 Fujielectric 2 Tellus, V-sft 2025-04-10 N/A 7.8 HIGH
Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.
CVE-2022-41645 1 Fujielectric 1 V-server 2025-04-10 N/A 7.8 HIGH
Out-of-bounds read vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.
CVE-2022-47908 1 Fujielectric 1 V-server 2025-04-10 N/A 7.8 HIGH
Stack-based buffer overflow vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted project file.