ZDI-CAN-27744 MEDIUM 5.5 Overdue Oct 09, 2025

Fuji Electric

Fuji Electric, a major Japanese industrial automation and power systems manufacturer, has a medium-severity vulnerability (CVSS 5.5) in one of their products that requires local access and low-level user privileges to exploit, with the primary impact being denial of service rather than data theft or system compromise. The attack requires no user interaction once an authenticated local attacker gains access to the system. Security teams managing Fuji Electric industrial control systems and automation equipment should monitor for unexpected privilege escalation attempts or crashes on these systems once patch details are disclosed closer to the February 2026 deadline.

Advisory Details
Researcher Discovered by: \xea\xb9\x80\xeb\xaa\x85\xea\xb7\x9c
Reported October 09, 2025
Deadline February 06, 2026 69d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy