Multiple vulnerabilities in V-SFT

🗓️ 16 May 2025 05:32:56Reported by Japan Vulnerability NotesType

jvn🔗 jvndb.jvn.jp👁 97 Views

Multiple V-SFT vulnerabilities may cause ABEND, information disclosure, or code execution on crafted V7 or V8 files.

Reporter	Title	Published	Views	Family All 156
BDU FSTEC	VS6EditData!CDataRomErrorCheck::MacroCommandCheck() HMI Configuration Software Monitouch V-	26 May 202500:00	–	bdu_fstec
BDU FSTEC	VS6MemInIF!set_temp_typedefault HMI Configuration Software Code Execution	26 May 202500:00	–	bdu_fstec
BDU FSTEC	VS6ComFile!MakeItemGlidZahyou() function in the Code Execution	26 May 202500:00	–	bdu_fstec
BDU FSTEC	HMI configuration software VS6EditData.dll WinFontMsgCheck() RCE	26 May 202500:00	–	bdu_fstec
BDU FSTEC	HMI configuration software VS6EditData!CDrawSLine::GetRectArea() Unauthenticated RCE	26 May 202500:00	–	bdu_fstec
BDU FSTEC	HMI configuration software VS6EditData!Conv_Macro_Data() Unauthenticated RCE	26 May 202500:00	–	bdu_fstec
BDU FSTEC	Monitouch V-SFT VS6EditData!VS4_SaveEnvFile Heap Buffer Overflow Privilege Esc	26 May 202500:00	–	bdu_fstec
BDU FSTEC	Monitouch V-SFT HMI Configuration Software Privilege Escalation	26 May 202500:00	–	bdu_fstec
BDU FSTEC	VS6MemInIF.dll Heap Buffer Overflow Privilege Escalation	26 May 202500:00	–	bdu_fstec
BDU FSTEC	VS6File!CTxSubFile::get_ProgramFile_name() HMI Configuration Software Monitouch V	26 May 202500:00	–	bdu_fstec

Source	Link
monitouch	www.monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord

16 May 2025 05:32Current

7.6High risk

Vulners AI Score7.6

CVSS 37.8

CVSS 3.17.8

CVSS 48.4

EPSS0.00253

SSVC