CVE-2024-11790: fallo de gravedad alta en Fuji Electric Monitouch V-SFT
Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.8epss 0.3%
Fuji Electric Monitouch V-SFT V10 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of V10 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24449.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Fuji Electric · Monitouch V-SFTCVEs relacionadas — Fuji Electric Monitouch V-SFT
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-34171HIGHFuji Electric Monitouch V-SFT Stack-Based Buffer OverflowEPSS 0.6%CVE-2024-5597HIGHFuji Electric Monitouch V-SFT Type ConfusionEPSS 0.5%CVE-2024-5271HIGHFuji Electric Monitouch V-SFT Access of Resource Using Incompatible Type ('Type Confusion')EPSS 0.4%CVE-2024-11933HIGHFuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11795HIGHFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-11792HIGHFuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%