CVE-2025-24306 — FUJI SOFT INCORPORATED / +F FS010M

CVE-2025-24306

FUJI SOFT INCORPORATED / +F FS010M PUBLISHED

Description (CNA)

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in +F FS010M versions prior to V2.0.0_1101. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote authenticated attacker with an administrative privilege.

Affected (CNA)

Vendor / product	Versions
FUJI SOFT INCORPORATED / +F FS010M	affected Versions prior to V2.0.0_1101

CWE

CWE-78

References

https://fsi-plusf.jp/news/25031701.html
https://jvn.jp/en/jp/JVN11230428/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.