Monitouch V-SFT
CVE-2025-61863
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted V-SFT file to engineer
-
DeliveryVictim opens file in V-SFT
-
ExploitTrigger out-of-bounds read in delete_mem
-
ExecutionLeak memory or execute code
-
ImpactInformation disclosure or RCE in user context
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a user to open an attacker-supplied, specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT version 6.2.7.0 or earlier - this user-interaction (file-open) step is mandatory (UI:A) and is the primary limiting factor. The attack is local only (AV:L): there is no network or service-listening exposure, so the attacker must first get the malicious file onto the victim's system and convince them to open it. No authentication or elevated privileges are needed (PR:N), and the flaw triggers within the normal file-parsing path in CSaveData::delete_mem, so no special non-default configuration is required beyond running a vulnerable version. Realistic risk is confined to engineering workstations where V-SFT is installed, limiting the exposed population to ICS/HMI development environments. |
| Impact | This is a moderate-priority, file-driven client-side vulnerability rather than a mass-exploitable remote flaw, despite its 8.4 CVSS 4.0 score. The vector (AV:L/AC:L/PR:N/UI:A) confirms the attack is LOCAL and requires a victim to actively open a specially crafted V-SFT file - it is not network-reachable and not server-side. The high score is driven entirely by the triad of high impact (VC:H/VI:H/VA:H) plus low complexity and no privileges, not by ease of remote reach. Supporting signals point to low real-world urgency: EPSS is only 0.17% (6th percentile), there is no CISA KEV listing, and no public exploit code is referenced. These signals are consistent - low exploitation probability, no active-exploitation evidence, and a user-interaction gate all reinforce that this is a genuine code-execution bug but not a widespread or automated threat. One nuance to verify: the vulnerability is formally classified as an out-of-bounds READ (CWE-125), yet the vendor/description also claims arbitrary code execution; OOB reads most reliably yield information disclosure and crashes (ABEND), so the RCE claim (and the 'Buffer Overflow' tag) should be treated as vendor-asserted worst case rather than independently confirmed. |
| Exploit ScenarioDerived | An attacker crafts a malicious V-SFT project file and delivers it to an engineer or operator (e.g., via email, shared drive, or a compromised project repository). When the victim opens the file in V-SFT v6.2.7.0 or earlier, the CSaveData::delete_mem routine performs an out-of-bounds read, leaking memory, crashing the application, or potentially executing attacker-controlled code in the user's context. No public exploit code was identified in the provided intelligence. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Opening a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT 6.2.7.0 or earlier can trigger an out-of-bounds read in VS6ComFile!CSaveData::delete_mem, resulting in information disclosure, abnormal termination (ABEND), and possible arbitrary code execution in the context of the user who opens the file. Exploitation is local and file-driven: the attacker must deliver a malicious project file and convince a user to open it, with no authentication or elevated privileges required, but user interaction is mandatory. No public exploit code has been identified at time of analysis and CISA KEV does not confirm active exploitation; EPSS is low at 0.17% (6th percentile), and real-world risk is concentrated on ICS/HMI engineering workstations running vulnerable V-SFT versions.
RemediationAI
Patch status per available data: Patch available per vendor advisory; the provided input does not include an exact fixed version number, so apply the latest fixed release from Fuji Electric's Monitouch V-SFT download page (https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php) or as directed by JVN advisory JVNVU90008453, and treat v6.2.7.0 and earlier as vulnerable. Until patched, block or strip untrusted V-SFT project file attachments at email and web gateways, and instruct users never to open project files from unknown sources; this reduces exposure but cannot stop file delivery via USB or shared folders. If untrusted files must be inspected, open them only in an isolated VM or sandbox with no access to production networks, and run V-SFT with least privilege; trade-offs include reduced convenience and the need for snapshot/rebuild procedures. Application allowlisting and endpoint detection can help catch V-SFT crashes or unexpected child processes, but these are compensating controls, not replacements for the vendor fix. Since exploitation requires local file-open user interaction, technical file blocking and sandboxing are stronger controls than awareness training alone.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The flaw is CWE-125 (out-of-bounds read) in the VS6ComFile component, specifically CSaveData::delete_mem, which is reached while parsing V-SFT project files. Fuji Electric Monitouch V-SFT is screen-design and engineering software for Monitouch HMI/PLC panels; when a crafted file supplies malformed data to the parser, the routine can read past the end of an allocated buffer. An out-of-bounds read can leak memory contents, crash the application (ABEND), and in some memory layouts contribute to arbitrary code execution, matching the tagged impacts of RCE, buffer overflow, and information disclosure. The NVD CPE cpe:2.3:a:fujielectric:monitouch_v-sft:*:*:*:*:*:*:*:* identifies the product family, while the CVE description scopes the issue to v6.2.7.0 and earlier. The assessed vector is CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, meaning local access, no privileges, no authentication, but required user interaction; this is consistent with the CVSS 4.0 vector's AV:L and UI:A, and it is not a remotely reachable service flaw.
Know when Monitouch V Sft gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Local file-parsing bug requiring the victim to open a malicious file, so AV:L and UI:R with no privileges (PR:N); claimed code execution and info disclosure justify C/I/A:H.
Primary rating from Vendor (jpcert).
CVSS VectorVendor: jpcert
DescriptionCVE.org
An out-of-bounds read vulnerability exists in VS6ComFile!CSaveData::delete_mem of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end (ABEND), and arbitrary code execution.
Executive ViewAI
Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier contain an out-of-bounds read vulnerability that can be triggered by opening a malicious project file, potentially leading to information disclosure, application crash, or arbitrary code execution on engineering workstations. These systems are critical for industrial control and HMI operations, so a successful exploit could disrupt manufacturing or process control environments. No public exploit identified at time of analysis, but with no vendor patch available, leadership should prioritize mitigating the risk through strict file handling controls and monitoring.
No vendor-released patch identified at time of analysis. Interim mitigations: restrict opening of V-SFT project files to trusted sources, implement application allowlisting (e.g., Windows Defender Application Control), deploy EDR with behavioral monitoring, segment engineering workstations from IT networks, conduct user awareness training on phishing and malicious file delivery, and consider file sandboxing or content disarm and reconstruction (CDR) for project files.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Affected Products (CPE)CVE.org
More in Monitouch V Sft
View allA Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Rated h
A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0.
Fuji Electric Monitouch V-SFT is vulnerable to a type confusion, which could cause a crash or code execution. Rated high
Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in
Fuji Electric Monitouch V-SFT is vulnerable to a stack-based buffer overflow, which could allow an attacker to execute a
Stack-based buffer overflow in Fuji Electric's Monitouch V-SFT HMI configuration software (v6.2.7.0 and earlier) lets an
An out-of-bounds read in Fuji Electric's Monitouch V-SFT HMI configuration software (version 6.2.7.0 and earlier) allows
Out-of-bounds write in Fuji Electric V-SFT 6.2.7.0 and earlier can let a crafted V-SFT project file cause information di
Opening a specially crafted V-SFT project file in Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier can trigger an out-o
Out-of-bounds write in Fuji Electric's MONITOUCH V-SFT HMI configuration tool (v6.2.7.0 and earlier) allows an attacker
Use-after-free memory corruption in Fuji Electric's Monitouch V-SFT engineering software (v6.2.7.0 and earlier) allows a
Arbitrary code execution and information disclosure in Fuji Electric Monitouch V-SFT 6.2.7.0 and earlier can be triggere
GitHub PoC
Exploit-DB