Fuji Electric Monitouch V-SFT-6 (Update A)

An attacker with local access to the engineering workstation running Monitouch V-SFT-6 could trigger a buffer overflow to crash the software or execute arbitrary commands, potentially disrupting SCADA design, simulation, and control system configuration workflows in energy facilities.

Energy sector operators relying on Fuji Electric Monitouch V-SFT-6 for SCADA design, configuration, and system simulation on engineering workstations. This affects staff who create or maintain control logic, communication networks, and process setpoints for generation, transmission, and distribution systems.

An attacker would need to deliver a malicious file or input to a user of the V-SFT-6 software (e.g., via email attachment or phishing). When the user opens or processes the file in the vulnerable V-SFT-6 application, the buffer overflow is triggered, allowing code execution on the engineering workstation with the privileges of the user running the software.