ZDI-CAN-27673 HIGH 7.8 Overdue Oct 09, 2025

Fuji Electric

Fuji Electric, a major Japanese manufacturer of industrial automation and power systems equipment, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires an authenticated local attacker to execute code with full system compromise potential. The vulnerability provides no remote attack vector but allows a low-privileged local user to gain complete confidentiality, integrity, and availability impact on affected systems without user interaction. Security teams managing Fuji Electric industrial control systems should monitor for exploitation attempts and prioritize patching once fixes become available after the February 2026 deadline.

Advisory Details
Researcher Discovered by: \xea\xb9\x80\xeb\xaa\x85\xea\xb7\x9c
Reported October 09, 2025
Deadline February 06, 2026 69d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy