Fuji Electric Monitouch V-SFT-6 Out-of-bounds Write
Priority LOW 38CWE-787Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Active
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
Fuji Electric Monitouch V-SFT-6 is vulnerable to an out-of-bounds write while processing a specially crafted project file, which may allow an attacker to execute arbitrary code.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00262 18th percentileScored 2026-11-07
Fix Fixed Monitouch V-SFT-6 (Fuji Electric): 6.2.8.0, 6.2.9.0 or newer.
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Fuji Electric | Monitouch V-SFT-6 | 6.2.7.0 | 6.2.8.0, 6.2.9.0 or newer. | Patch available | CNA |
- Monitouch V-SFT-6 VendorFuji Electric Affected 6.2.7.0 Fixed in 6.2.8.0, 6.2.9.0 or newer. Patch available CNA
Remediation
- Fix · CNA Monitouch V-SFT-6 (Fuji Electric) Fixed in 6.2.8.0, 6.2.9.0 or newer.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-53524
- 2026-10-03 Alias added: GHSA-ghjx-924r-mqm7
References
Other 3
- https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1®ion=en-glb
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json
More Fuji Electric vulnerabilities
- TI-2019-13257 Heap-based buffer overflow in Fuji Electric V-Server 4.0.6 and prior CVSS 3.1CRITICAL 9.8
- TI-2018-10620 Out-of-bounds read in Fuji Electric FRENIC LOADER of FRENIC-Mini , FRENIC-Mini… CVSS 3.0CRITICAL 9.8
- TI-2018-10653 Stack-based buffer overflow in Fuji Electric V-Server CVSS 3.1CRITICAL 9.8
- TI-2018-10643 Heap-based buffer overflow in Fuji Electric V-Server CVSS 3.1CRITICAL 9.8
- TI-2018-03956 Stack-based buffer overflow in Fuji Electric V-Server VPR CVSS 3.1CRITICAL 9.8
- TI-2018-10649 Out-of-bounds read in Fuji Electric V-Server CVSS 3.0CRITICAL 9.8
Sources
- CVE-2025-53524 · CVE Program
- CVE-2025-53524 · NVD
- FIRST EPSS
- GHSA-ghjx-924r-mqm7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences