Remote Code Execution Vulnerability in Fuji Electric Monitouch V-SFT

CVE-2024-11797

What is CVE-2024-11797?

The identified vulnerability in Fuji Electric's Monitouch V-SFT V8 relates to its handling of file parsing, specifically concerning V8 files. Due to insufficient validation mechanisms, this flaw allows attackers to send specially crafted files, leading to an out-of-bounds write condition. When exploited, this vulnerability permits remote attackers to execute arbitrary code within the context of the affected process, provided that the user specifically opens a malicious file or visits a harmful web page. This presents a notable risk for sensitive industrial applications utilizing the affected software, highlighting the importance of addressing file handling security.

References