Buffer Overflow Vulnerability in Fuji Electric Monitouch V-SFT-6
CVE-2025-54526

8.4HIGH

Key Information:

Vendor

Fuji Electric

Status
Monitouch V-sft-6
Vendor
CVE Published:
4 November 2025

What is CVE-2025-54526?

The Fuji Electric Monitouch V-SFT-6 is susceptible to a stack-based buffer overflow when processing specially crafted project files. This flaw can be exploited to potentially allow an attacker to execute arbitrary code on the affected system, posing a serious security risk. It is imperative for users and administrators to update their products and take appropriate security measures to protect their systems from exploit attempts.

Affected Version(s)

Monitouch V-SFT-6 6.2.7.0

Monitouch V-SFT-6 6.2.8.0

Monitouch V-SFT-6 6.2.9.0 or newer.

References

https://felib.fujielectric.co.jp/en/document_search?tab=s...
https://www.cisa.gov/news-events/ics-advisories/icsa-25-3...
https://github.com/cisagov/CSAF/blob/develop/csaf_files/O...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rocco Calvi with TecSecurity working with Trend Micro Zero Day Initiative reported these vulnerabilities to CISA.
JSON
.
CVE-2025-54526 : Buffer Overflow Vulnerability in Fuji Electric Monitouch V-SFT-6