Read the docs

FUJI SOFT INCORPORATED

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

FUJI SOFT INCORPORATED records in CISA KEV

No FUJI SOFT INCORPORATED vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Fs010w Firmware 2 records LOW Fs040u Firmware 2 records LOW Fs020w Firmware 1 record LOW Fs030w Firmware 1 record LOW Fs040w Firmware 1 record LOW

Records

6 records

TI-2025-18888 CVE-2025-25220 · GHSA-4xfg-8977-37fx

OS command injection in FUJI SOFT INCORPORATED +F FS010M

Priority MEDIUM 42

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.1_1101.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00993 Published 2025-03-18 Fixed in V2.0.1_1101 CWE-78
TI-2018-00477 CVE-2018-0520 · GHSA-xprq-5rwr-7h56

Cross-site request forgery in FUJI SOFT INCORPORATED FS010W

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2018-02-23 No fix listed CWE-352
TI-2025-18051 CVE-2025-24306 · GHSA-f3ff-gxqf-prhc

OS command injection in FUJI SOFT INCORPORATED +F FS010M

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.0_1101.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01038 Published 2025-03-18 Fixed in V2.0.0_1101 CWE-78
TI-2022-21262 CVE-2022-43470 · GHSA-m554-rhfc-2hcg

Cross-site request forgery in FUJI SOFT INCORPORATED +F FS040U, +F FS020W, +F FS030W, and…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software ve…

CVSS 3.1HIGH 7.3 Adjacent network No auth User interaction EPSS 0.00233 Published 2022-12-05 No fix listed CWE-352
TI-2018-00476 CVE-2018-0519 · GHSA-5p5f-vgg5-wph8

Cross-site scripting in FUJI SOFT INCORPORATED FS010W

Priority LOW 23

Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00524 Published 2018-02-23 No fix listed CWE-79
TI-2022-21237 CVE-2022-43442 · GHSA-8m8p-mfww-c2cg

Insufficiently protected credentials in FUJI SOFT INCORPORATED +F FS040U software

Priority LOW 21

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00306 Published 2022-12-05 No fix listed CWE-522
Open these records in search →