High severity · published Jul 8, 2025
CVE-2025-50130
A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD.
Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
TELLUS · FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.
v4.0.20.0 and earlier · source: vendor
VS
V-SFT-6 · FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.
v6.2.5.0 and earlier · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-50130
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-50130
jvn.jp
https://jvn.jp/en/vu/JVNVU94011267/
monitouch.fujielectric.com
https://monitouch.fujielectric.com/site/download-e/03tellus_inf/Search.php
monitouch.fujielectric.com
https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/Search.php