CVE-2017-9659

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9660

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9659

CVE-2017-9659 affects Fuji Electric Monitouch V-SFT before version 5.4.43.0. The issue is a stack-based buffer overflow in parsing V8 project files, which can crash the application and may allow remote code execution. Public references (ZDI advisories) describe exploitation requiring user interac...

CVE-2017-9660

Fuji Electric Monitouch V-SFT is affected by CVE-2017-9660 (heap-based buffer overflow) in versions prior to 5.4.43.0. The issue arises in parsing V8 project files and may cause a crash or remote code execution. Exploitation details vary across sources: ZDI describes remote code execution requiri...

CVE-2017-9662

CVE-2017-9662 describes an Improper Privilege Management vulnerability in Fuji Electric Monitouch V-SFT, affecting versions prior to 5.4.43.0. The issue arises because Monitouch V-SFT is installed in a directory with default weak access controls, enabling an authenticated attacker with local acce...

CVE-2017-9662: Improper Privilege Management

An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...

CVE-2017-9660: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9659: Improper Restriction of Operations within the Bounds of a Memory Buffer

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

Fuji Electric Monitouch V-SFT Insecure Configuration Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate their privileges on vulnerable installations of Fuji Electric Monitouch V-SFT. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

PT-2017-19100

Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT versions prior to 5.4.43.0 Description A Stack-Based Buffer Overflow issue was discovered, which may cause a crash or allow remote code execution. Recommendations For versions prior to 5.4.43.0, update to version...

PT-2017-19103

Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT versions prior to 5.4.43.0 Description An issue with improper privilege management was found, which could allow an authenticated attacker with local access to escalate privileges due to the software being installe...

PT-2017-19101

Name of the Vulnerable Software and Affected Versions Fuji Electric Monitouch V-SFT versions prior to 5.4.43.0 Description A Heap-Based Buffer Overflow was discovered, which may cause a crash or allow remote code execution. This issue affects the project file parsing functionality. Recommendation...

Fuji Electric Monitouch V-SFT

CVSS v3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Fuji Electric Equipment: Monitouch V-SFT Vulnerabilities: Stack-Based Buffer Overflow, Heap-Based Buffer Overflow, Improper Privilege Management AFFECTED PRODUCTS The following versions of Monitouch V-SFT, a screen...

CVE-2017-3234

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service...

CVE-2017-3234

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service...

PT-2017-15715

Name of the Vulnerable Software and Affected Versions Oracle Support Tools versions prior to 5.7 Description The issue concerns the Automatic Service Request ASR component, specifically the ASR Manager subcomponent. It allows an unauthenticated attacker with network access to compromise the...

CVE-2017-3234: Undefined Security Weakness

Vulnerability in the Automatic Service Request ASR component of Oracle Support Tools subcomponent: ASR Manager. The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service...