← back
CVE-2025-50130

CVE-2025-50130

CVSS 8.4 HIGHEPSS 0.2%CWE-122
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Jul 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · TELLUSFUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT-6
References
https://jvn.jp/en/vu/JVNVU94011267/https://monitouch.fujielectric.com/site/download-e/03tellus_inf/Search.phphttps://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php