Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

🗓️ 31 May 2024 00:00:00Reported by kimiyaType

zdi🔗 www.zerodayinitiative.com👁 19 Views

Fuji Electric Monitouch V-SFT V9C File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability - allows remote code execution on affected installations, requires user interaction to exploit, exists within parsing of V9C files, lack of proper validation of user-supplied data, results in a write past the end of an allocated data structure, attacker can execute code in the context of the current process

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the HMI interface configuration software Monitouch V-SFT lies in the possibility of operations going beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.	4 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-5271	18 Jul 202518:32	–	circl
CNNVD	Fuji Electric Monitouch V-SFT 缓冲区错误漏洞	30 May 202400:00	–	cnnvd
CNVD	Fuji Electric Monitouch V-SFT Buffer Overflow Vulnerability (CNVD-2025-13533)	3 Jun 202400:00	–	cnvd
CVE	CVE-2024-5271	30 May 202419:53	–	cve
Cvelist	CVE-2024-5271 Fuji Electric Monitouch V-SFT Access of Resource Using Incompatible Type ('Type Confusion')	30 May 202419:53	–	cvelist
EUVD	EUVD-2024-46508	3 Oct 202520:07	–	euvd
ICS	Fuji Electric Monitouch V-SFT (Update A)	30 May 202406:00	–	ics
NVD	CVE-2024-5271	30 May 202420:15	–	nvd
Positive Technologies	PT-2024-3934	3 Jan 202400:00	–	ptsecurity