Monitouch V-SFT
CVE-2025-61862
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted V-SFT project file to engineer
-
ExploitVictim opens file in vulnerable V-SFT ≤6.2.7.0
-
ExecutionTrigger out-of-bounds read in get_ovlp_element_size
-
ImpactExecute code or disclose memory on engineering host
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a user to open a specially crafted V-SFT file in Fuji Electric Monitouch V-SFT version 6.2.7.0 or earlier; the malicious data is parsed by VS6ComFile!get_ovlp_element_size. Limiting factors: the attack vector is LOCAL (AV:L) with mandatory user interaction (UI:A) - there is no remote or network-triggered path - so the attacker must deliver the crafted file and socially engineer the victim (typically an engineer/integrator on an HMI configuration workstation) into opening it. No privileges or authentication are needed on the target application (PR:N), but the dependence on victim action and a specific, non-ubiquitous ICS tool substantially narrows realistic exploitation. |
| Impact | This is a file-parsing memory-safety flaw (CWE-125 out-of-bounds read) in Fuji Electric's Monitouch V-SFT HMI configuration software. The provided CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:A) is internally consistent with the description: exploitation is LOCAL and requires a victim to actively open a malicious file, not remote/network-triggered - so the 8.4 base score is driven by high impact (VC:H/VI:H/VA:H) rather than easy reachability. The real-world exploitation signals point sharply lower than the score suggests: EPSS is only 0.17% (6th percentile), there is no CISA KEV listing, and no public exploit code is referenced - no public exploit identified at time of analysis. The practical gating factor is user interaction plus the need to socially engineer a target into opening a crafted V-SFT project file, which makes opportunistic mass exploitation unlikely and pushes this toward targeted ICS/OT engineering-workstation scenarios. Net: a legitimately high-impact bug (potential RCE on an engineering host) but a mid-tier operational priority - prioritize patching for environments running V-SFT, but it is not an emergency drive-by threat. Note a tag/weakness mismatch: input tags list 'Buffer Overflow' while the authoritative weakness is an out-of-bounds READ (CWE-125) - verify the exact corruption primitive with the vendor before assuming write/overflow behavior. |
| Exploit ScenarioDerived | An attacker crafts a malicious V-SFT project/configuration file and delivers it to an engineer or integrator (via email, shared project repository, or a compromised supplier), who opens it in V-SFT v6.2.7.0 or earlier. Parsing in VS6ComFile!get_ovlp_element_size triggers an out-of-bounds read that can leak memory, crash the application (ABEND), or be leveraged for arbitrary code execution on the engineering workstation. No public exploit code is referenced, so exploitation would require custom development. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Arbitrary code execution and information disclosure in Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier can be triggered when a user opens a specially crafted V-SFT file, because the VS6ComFile!get_ovlp_element_size function performs an out-of-bounds read (CWE-125). The CVSS 4.0 base score is 8.4, and the assessed CVSS 3.1 vector is local (AV:L), requires no privileges (PR:N) but does require user interaction (UI:R), with high confidentiality, integrity, and availability impact. No public exploit code was identified at time of analysis, and EPSS is 0.17% (6th percentile), so exploitation appears to depend on targeted delivery of a malicious project file to an HMI engineering workstation.
RemediationAI
Patch available per vendor advisory; upgrade Fuji Electric Monitouch V-SFT from 6.2.7.0 or earlier to a fixed release listed through the vendor advisory/download page at https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php and review JVN note https://jvn.jp/en/vu/JVNVU90008453/. No exact fixed version number is stated in the provided data, so validate the patched build with Fuji Electric before deployment. Until upgrading, avoid opening untrusted or unsolicited V-SFT project files, restrict project-file exchange to vetted engineering sources, and use Windows file-type/application allowlisting to prevent V-SFT from being launched on unapproved files; these controls reduce the user-interaction attack path but may slow legitimate HMI project sharing. Running V-SFT on an isolated engineering workstation with limited network reachability and backups can contain an ABEND or code-execution event, but it does not eliminate the parsing flaw and may complicate remote support.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Monitouch V-SFT is Fuji Electric's HMI/PLC screen configuration software, and the vulnerability is a CWE-125 out-of-bounds read in the VS6ComFile!get_ovlp_element_size routine, reached while parsing a V-SFT project file. The affected CPE is cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:*, covering V-SFT v6.2.7.0 and earlier. The assessed CVSS 3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) shows a local file-format attack surface with mandatory user interaction, while the vendor/NVD CVSS 4.0 score of 8.4 reflects high confidentiality, integrity, and availability impact. An out-of-bounds read can disclose memory contents and, depending on the read location and subsequent parsing behavior, may cause an abnormal end (ABEND) or enable arbitrary code execution.
Know when Monitouch V Sft gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Exploitation requires the victim to open a malicious local file, so AV:L and UI:R with PR:N; successful parsing can yield code execution with high confidentiality, integrity, and availability impact.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
DescriptionCVE.org
An out-of-bounds read vulnerability exists in VS6ComFile!get_ovlp_element_size of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Executive ViewAI
Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier carries a high-severity flaw that can let a malicious project file compromise an HMI engineering workstation, potentially leading to code execution, data exposure, and disruption of industrial monitoring and control activities. The issue requires a user to open a crafted file and no public exploit identified at time of analysis, so the immediate risk is targeted rather than broad; however, engineering workstations often have privileged access to operational technology environments, making this a priority for security leadership. No vendor-released patch identified at time of analysis, so compensating controls and heightened file-handling discipline are required until a fix is available.
No vendor-released patch identified at time of analysis; interim mitigations include restricting V-SFT project file opening to trusted and verified sources, isolating HMI engineering workstations on segmented networks with limited lateral access, running with least privilege and application allowlisting, using sandboxed or virtualized environments to inspect untrusted project files, blocking or scanning email and removable media file transfers, and monitoring for unusual process or file activity on engineering workstations.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
More in Monitouch V Sft
View allA Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Rated h
A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0.
Fuji Electric Monitouch V-SFT is vulnerable to a type confusion, which could cause a crash or code execution. Rated high
Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in
Fuji Electric Monitouch V-SFT is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute a
Stack-based buffer overflow in Fuji Electric's Monitouch V-SFT HMI configuration software (v6.2.7.0 and earlier) lets an
An out-of-bounds read in Fuji Electric's Monitouch V-SFT HMI configuration software (version 6.2.7.0 and earlier) allows
Out-of-bounds write in Fuji Electric V-SFT 6.2.7.0 and earlier can let a crafted V-SFT project file cause information di
Opening a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier can trigger an out-o
Out-of-bounds write in Fuji Electric's MONITOUCH V-SFT HMI configuration tool (v6.2.7.0 and earlier) allows an attacker
Use-after-free memory corruption in Fuji Electric's Monitouch V-SFT engineering software (v6.2.7.0 and earlier) allows a
Opening a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT 6.2.7.0 or earlier can trigger an out-of
GitHub PoC
Exploit-DB