Monitouch V-SFT
CVE-2025-61858
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted V-SFT file to engineer
-
DeliveryVictim opens file in V-SFT
-
ExploitTrigger OOB write in set_AnimationItem
-
ExecutionExecute arbitrary code in user context
-
ImpactCompromise HMI engineering workstation
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, write limits
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a local user to actively open a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT version 6.2.7.0 or earlier; the malformed file must drive attacker-controlled data into the VS6ComFile!set_AnimationItem animation-item handling path to trigger the out-of-bounds write. There is no network-reachable component - the attacker must deliver the file and rely on the victim opening it (UI:A). Limiting factors: required user interaction, local file-handling only, dependence on the victim running the vulnerable V-SFT engineering software (a specialized ICS tool), and no privilege escalation beyond the opening user's context (SC/SI/SA:N). |
| Impact | Signals are consistent and point to a genuine but NOT emergency-priority issue. The CVSS 4.0 vector (AV:L/AC:L/PR:N/UI:A) correctly frames this as a client-side, file-parsing vulnerability: an attacker cannot reach it over the network - a local user must actively open a malicious V-SFT project file. The 8.4 (High) score is driven entirely by the triad of high confidentiality, integrity and availability impact (VC:H/VI:H/VA:H) via arbitrary code execution, not by ease of reach. EPSS is low at 0.18% (7th percentile), which aligns with the UI:A requirement and the niche industrial user base - mass automated exploitation is improbable. There is no CISA KEV listing and no public exploit identified, so this is not confirmed in-the-wild activity. The signals do not conflict: a high technical-impact flaw gated behind required user interaction against a specialized ICS engineering tool. Realistic risk is targeted/social-engineering driven (e.g., a crafted project file sent to an HMI engineer) rather than widespread opportunistic exploitation. |
| Exploit ScenarioDerived | An attacker crafts a malicious V-SFT configuration file that triggers the out-of-bounds write in VS6ComFile!set_AnimationItem and delivers it to a Fuji Electric Monitouch HMI engineer (e.g., via email, shared project repository, or USB). When the engineer opens the file in V-SFT v6.2.7.0 or earlier, the memory corruption yields information disclosure, an application crash (ABEND), or arbitrary code execution in the user's context. No public exploit code has been identified at time of analysis, and exploitation requires the victim to actively open the file. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Opening a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier can trigger an out-of-bounds write in the VS6ComFile!set_AnimationItem function, leading to information disclosure, abnormal termination, or arbitrary code execution. Exploitation requires the victim to actively open a malicious file (user interaction) and is limited to the security context of the user running the application; no public exploit code or active exploitation has been identified (EPSS 0.18%, not in CISA KEV). The independent assessment rates this as a genuine but not emergency-priority issue.
RemediationAI
No vendor-released patch identified in the provided data; consult JVN advisory JVNVU90008453 and the Fuji Electric Monitouch V-SFT download page (https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php) for updated versions. Until a fix is applied, avoid opening V-SFT project files from untrusted sources, and restrict access to V-SFT files to trusted users. Consider running V-SFT with least privileges or in a sandboxed environment to limit the impact of successful exploitation, though these are compensating controls and do not eliminate the risk.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability is a CWE-787 out-of-bounds write in the animation-item handling routine (VS6ComFile!set_AnimationItem) of Fuji Electric Monitouch V-SFT, an engineering tool for programming Monitouch HMI panels. When parsing a V-SFT project file, insufficient bounds checking on attacker-controlled data can corrupt memory, enabling code execution or information leaks. The affected product is identified by CPE cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*, covering versions up to 6.2.7.0. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) indicates a local attack vector requiring no privileges but needing user interaction to open the file, with high confidentiality, integrity, and availability impact on the vulnerable component only. The independent assessment aligns with this (CVSS 3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Know when Monitouch V Sft gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
File-parsing flaw: AV:L and UI:R because the victim must open a crafted file; PR:N as no authentication is needed; C/I/A:H reflect disclosure, ABEND, and arbitrary code execution.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
DescriptionCVE.org
An out-of-bounds write vulnerability exists in VS6ComFile!set_AnimationItem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Executive ViewAI
Fuji Electric Monitouch V-SFT, a widely used HMI/SCADA screen design application, contains a high-severity out-of-bounds write vulnerability (CVE-2025-61858) that could lead to arbitrary code execution or information disclosure when a user opens a malicious project file. Although exploitation requires user interaction and no public exploit identified at time of analysis, the potential compromise of engineering workstations in industrial control environments poses a significant risk to operational technology networks. Leadership should prioritize mitigation through user awareness, technical controls, and vendor engagement.
No vendor-released patch identified at time of analysis. Interim mitigations include: avoid opening untrusted V-SFT project files; restrict access to engineering workstations and enforce least privilege; implement application whitelisting to block unauthorized executables; segment engineering networks from corporate IT; monitor for abnormal termination or suspicious process creation; and conduct user awareness training on phishing and social engineering tactics that deliver malicious project files.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
More in Monitouch V Sft
View allA Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Rated h
A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0.
Fuji Electric Monitouch V-SFT is vulnerable to a type confusion, which could cause a crash or code execution. Rated high
Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in
Fuji Electric Monitouch V-SFT is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute a
Stack-based buffer overflow in Fuji Electric's Monitouch V-SFT HMI configuration software (v6.2.7.0 and earlier) lets an
An out-of-bounds read in Fuji Electric's Monitouch V-SFT HMI configuration software (version 6.2.7.0 and earlier) allows
Out-of-bounds write in Fuji Electric V-SFT 6.2.7.0 and earlier can let a crafted V-SFT project file cause information di
Out-of-bounds write in Fuji Electric's MONITOUCH V-SFT HMI configuration tool (v6.2.7.0 and earlier) allows an attacker
Use-after-free memory corruption in Fuji Electric's Monitouch V-SFT engineering software (v6.2.7.0 and earlier) allows a
Opening a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT 6.2.7.0 or earlier can trigger an out-of
Arbitrary code execution and information disclosure in Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier can be triggere
GitHub PoC
Exploit-DB