ZDI-CAN-27670 HIGH 7.8 Overdue Sep 11, 2025

Fuji Electric

Fuji Electric, a major Japanese manufacturer of industrial automation and power systems, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to exploit, but grants attackers complete control over confidentiality, integrity, and system availability. The vulnerability was reported in September 2025 with a vendor patch deadline of January 2026, giving organizations roughly four months to prepare. Security teams should prioritize monitoring for suspicious local privilege escalation attempts on Fuji Electric systems and ensure timely patching once updates become available.

Advisory Details
Researcher Discovered by: 김명규
Reported September 11, 2025
Deadline January 09, 2026 97d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy