Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: FUJI SOFT INCORPORATED Clear all filters
TI-2025-18888 CVE-2025-25220 · GHSA-4xfg-8977-37fx

OS command injection in FUJI SOFT INCORPORATED +F FS010M

Priority MEDIUM 42

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.1_1101.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00993 Published 2025-03-18 Fixed in V2.0.1_1101 CWE-78
TI-2025-18051 CVE-2025-24306 · GHSA-f3ff-gxqf-prhc

OS command injection in FUJI SOFT INCORPORATED +F FS010M

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.0_1101.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01038 Published 2025-03-18 Fixed in V2.0.0_1101 CWE-78
TI-2022-21262 CVE-2022-43470 · GHSA-m554-rhfc-2hcg

Cross-site request forgery in FUJI SOFT INCORPORATED +F FS040U, +F FS020W, +F FS030W, and…

Priority LOW 34

Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and +F FS040W software ve…

CVSS 3.1HIGH 7.3 Adjacent network No auth User interaction EPSS 0.00233 Published 2022-12-05 No fix listed CWE-352
TI-2022-21237 CVE-2022-43442 · GHSA-8m8p-mfww-c2cg

Insufficiently protected credentials in FUJI SOFT INCORPORATED +F FS040U software

Priority LOW 21

Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the management console.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00306 Published 2022-12-05 No fix listed CWE-522
TI-2018-00477 CVE-2018-0520 · GHSA-xprq-5rwr-7h56

Cross-site request forgery in FUJI SOFT INCORPORATED FS010W

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2018-02-23 No fix listed CWE-352
TI-2018-00476 CVE-2018-0519 · GHSA-5p5f-vgg5-wph8

Cross-site scripting in FUJI SOFT INCORPORATED FS010W

Priority LOW 23

Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00524 Published 2018-02-23 No fix listed CWE-79