Vulnerability · Published Jun 16, 2022 · Assigned by jpcert
CVE-2022-30538
High 7.8
In plain English
A high-severity security flaw in V-SFT from FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.8%top 42.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Out-of-bounds write vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1.6.0, which may allow an attacker to obtain information and/or execute arbitrary code by having a user to open a specially crafted image file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. | V-SFT | versions prior to v6.1.6.0 |
References
- https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php x_refsource_MISC
- https://jvn.jp/en/vu/JVNVU99188133/index.html x_refsource_MISC