Логотип exploitDog
bind:CVE-2024-11795
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-11795

Количество 3

Количество 3

nvd логотип

CVE-2024-11795

около 1 года назад

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24505.

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-mfqc-rm3c-48wj

около 1 года назад

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24505.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2024-10785

около 1 года назад

Уязвимость программного средства для конфигурирования HMI-интерфейсов Monitouch V-SFT, связанная с возможностью переполнения буфера на основе стека, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-11795

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24505.

CVSS3: 7.8
1%
Низкий
около 1 года назад
github логотип
GHSA-mfqc-rm3c-48wj

Fuji Electric Monitouch V-SFT V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of V8 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24505.

CVSS3: 7.8
1%
Низкий
около 1 года назад
fstec логотип
BDU:2024-10785

Уязвимость программного средства для конфигурирования HMI-интерфейсов Monitouch V-SFT, связанная с возможностью переполнения буфера на основе стека, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
1%
Низкий
около 1 года назад

Уязвимостей на страницу