Remote Code Execution Vulnerability in Fuji Electric Monitouch V-SFT

CVE-2024-11795

What is CVE-2024-11795?

The vulnerability identified in Fuji Electric's Monitouch V-SFT V8 arises due to inadequate validation of user-supplied data lengths during the parsing of V8 files. This oversight can lead to a stack-based buffer overflow, which permits remote attackers to execute arbitrary code on systems running affected versions. Exploitation of this vulnerability requires user interaction, as the targeted system must access a malicious webpage or open a compromised file. By manipulating the file inputs, an attacker may gain control over the current process, thus posing security risks to the integrity and availability of the system.

References