Vulnerability · Published Jun 14, 2022 · Assigned by jpcert
CVE-2022-29506
High 7.8
In plain English
A high-severity security flaw in V-SFT from FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)1.0%top 37.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earlier, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. | V-SFT | v6.1.3.0 and earlier |
References
- https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php x_refsource_MISC
- https://monitouch.fujielectric.com/site/download-eu/03tellus_inf/index.php x_refsource_MISC
- https://jvn.jp/en/vu/JVNVU93134398/index.html x_refsource_MISC