Remote Code Execution Vulnerability in Fuji Electric Monitouch V-SFT

CVE-2024-11789

What is CVE-2024-11789?

The vulnerability associated with the Fuji Electric Monitouch V-SFT V10 arises from a stack-based buffer overflow during the parsing of V10 files. This flaw is due to insufficient validation of user-input data lengths before they are copied into a stack-based buffer. If exploited, remote attackers can execute arbitrary code in the affected system's context, provided that the user interacts with a malicious file or navigates to a compromised web page. It is crucial for users of Monitouch V-SFT V10 to be aware of this vulnerability, particularly in environments where the software is widely implemented.

References