FUJI SOFT INCORPORATED
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| +F FS010M | 2 | – | Mar 18, 2025 |
| +F FS040U, +F FS020W, +F FS030W, and +F FS040W | 1 | – | Dec 5, 2022 |
| +F FS040U software | 1 | – | Dec 5, 2022 |
Exploited and recent CVEs
- CVE-2025-25220 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.1_1101. If this vulnerability is exploited, an arbitrary OS 1.0%
- CVE-2025-24306 Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.0_1101. If this vulnerability is exploited, an arbitrary OS 1.0%
- CVE-2022-43470 Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software versions v4.0.0 and earlier, +F FS030W software versions v3.3.5 and earlier, and + 0.2%
- CVE-2022-43442 Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow an attacker to obtain the login password of +F FS040U and log in to the manageme 0.3%