ZDI-CAN-27671 HIGH 7.8 Overdue Sep 10, 2025

Fuji Electric

Fuji Electric, a major Japanese industrial automation and power systems company, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and valid user credentials but causes significant compromise of confidentiality, integrity, and availability once exploited. Security teams should monitor for this vulnerability affecting industrial control systems and implement strict access controls on Fuji Electric products, as the four-month vendor deadline (January 8, 2026) allows time for patch development and deployment before potential public disclosure.

Advisory Details
Researcher Discovered by: 김명규
Reported September 10, 2025
Deadline January 08, 2026 98d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy