CVE-2024-5271 - Fuji Electric Monitouch V-SFT Access of Resource Using Incompatible Type ('Type Confusion')

Back Back to CVE browser

HIGH

Fuji Electric Monitouch V-SFT Access of Resource Using Incompatible Type ('Type Confusion')

Published May 30, 2024

8.5

HIGH

CVSS 4.0

EPSS 0.38%

Description

Fuji Electric Monitouch V-SFT is vulnerable to an out-of-bounds write because of a type confusion, which could result in arbitrary code execution.

Affected products

Vendor Fuji Electric Product Monitouch V-SFT Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <6.2.3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fuji Electric

Monitouch V-SFT

unaffected

Version	Status	Constraints
0	affected	<6.2.3.0

Vendor Fujielectric Product Monitouch V-Sft Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <=6.2.3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fujielectric

Monitouch V-Sft

n/a

Version	Status	Constraints
0	affected	<=6.2.3.0

Remediation

Vendor solution

Fuji Electric recommends users update the product to Monitouch V-SFT v6.2.3.0 https://felib.fujielectric.co.jp/en/M10009/M20104/document_detail/55ff739b-bd06-4241-b078-3b9c9728bdfd .

Weaknesses (1)

CWE-843

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46508
Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-02
Third Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-46508		Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-24-151-02		Third Party AdvisoryUS Government Resource