Vulnerability details

CVE-2025-50130

FUJI ELECTRIC CO., LTD. / Hakko Electronics TELLUSFUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT-6

CVSS 4.0

8.4High

Official description

A heap-based buffer overflow vulnerability exists in VS6Sim.exe contained in V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. Opening V9 files or X1 files specially crafted by an attacker on the affected product may lead to arbitrary code execution.

CVSS scores

Score	Version	Source	Vector
8.4High	4.0	CVEProject cvelistV5 (CNA) (jpcert)	`CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
7.8High	3.1	CVEProject cvelistV5 (CNA) (jpcert)	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.	TELLUS	v4.0.20.0 and earlier	CVEProject cvelistV5 (CNA)
FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.	V-SFT-6	v6.2.5.0 and earlier	CVEProject cvelistV5 (CNA)

References and advisories

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-07-08
Last updated: 2025-07-08
State: Published
Assigner (CNA): jpcert

Exploit prediction (EPSS)

0.23%

Probability of exploitation in 30 days

14%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-122
Heap-based buffer overflow