Логотип exploitDog
bind:CVE-2024-11792
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-11792

Количество 3

Количество 3

nvd логотип

CVE-2024-11792

около 1 года назад

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24502.

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-x578-xmfm-9w46

около 1 года назад

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24502.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2024-10782

около 1 года назад

Уязвимость программного средства для конфигурирования HMI-интерфейсов Monitouch V-SFT, связанная с возможностью переполнения буфера на основе стека, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-11792

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24502.

CVSS3: 7.8
1%
Низкий
около 1 года назад
github логотип
GHSA-x578-xmfm-9w46

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24502.

CVSS3: 7.8
1%
Низкий
около 1 года назад
fstec логотип
BDU:2024-10782

Уязвимость программного средства для конфигурирования HMI-интерфейсов Monitouch V-SFT, связанная с возможностью переполнения буфера на основе стека, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
1%
Низкий
около 1 года назад

Уязвимостей на страницу