CVE-2025-54526

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-54526
Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted project file, which may allow an attacker to execute arbitrary code.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb Product
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json Third Party Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*
History

12 Nov 2025, 17:15

Type Values Removed Values Added
First Time Fujielectric
Fujielectric monitouch V-sft
References () https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb - () https://felib.fujielectric.co.jp/en/document_search?tab=software&document1%5B1%5D=M10009&document2%5B1%5D=M20104&product1%5B1%5D=P10003&product2%5B1%5D=P20023&product3%5B1%5D=P30623&product4%5B1%5D=S11133&discontinued%5B1%5D=0&count=20&sort=en_title&page=1&region=en-glb - Product
References () https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json - () https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-01.json - Third Party Advisory
References () https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01 - () https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-01 - Third Party Advisory, US Government Resource
CPE cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*

06 Nov 2025, 19:45

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-04 22:16

Updated : 2025-11-12 17:15

NVD link : CVE-2025-54526

Mitre link : CVE-2025-54526

CVE.ORG link : CVE-2025-54526

JSON object : View

Products Affected

fujielectric

  • monitouch_v-sft
CWE
CWE-121

Stack-based Buffer Overflow