CVE-2024-11795

Summary

CVE-2024-11795 is a stack-based buffer overflow vulnerability in Fuji Electric Monitouch V-SFT's file parsing functionality for V8 files. This issue enables remote code execution, allowing attackers to execute arbitrary code on affected Monitouch V-SFT installations. The vulnerability arises due to insufficient validation of user-supplied data length before copying it to a buffer. User interaction is necessary for exploitation, with the target required to visit a malicious page or open a malicious file. This vulnerability, originally discovered and reported as ZDI-CAN-24505, could potentially lead to significant security implications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.