CVE-2025-50130

CVSS 8.4 HIGHEPSS 0.2%CWE-122

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 jul 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · TELLUS FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. · V-SFT-6

Referencias

https://jvn.jp/en/vu/JVNVU94011267/https://monitouch.fujielectric.com/site/download-e/03tellus_inf/Search.php https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php