CVE-2024-11792

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 28, 2024
Updated: Dec 3, 2024
CWE ID 121
CWE ID 787

Summary

CVE-2024-11792 is a remote code execution vulnerability affecting Fuji Electric Monitouch V-SFT. Malicious files or web pages can trigger this issue, which lies in the improper validation of user-supplied data during V8 file parsing. The lack of size checks for data before copying it to a stack-based buffer results in a stack-based buffer overflow. An attacker can exploit this vulnerability to execute arbitrary code on affected installations.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share