CVE-2019-6532

Опубликовано: 07 июн. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution.

Ссылки

http://www.securityfocus.com/bid/108683
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02
Mailing List
Patch
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-566/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-568/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-570/
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/108683
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02
Mailing List
Patch
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-19-566/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-568/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-19-570/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:panasonic:control_fpwin_pro:*:*:*:*:*:*:*:*

Версия до 7.3.0.0 (включая)

EPSS

Процентиль: 71%

0.00684

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-843

Связанные уязвимости

GHSA-w86h-hpww-mqhw

github

больше 3 лет назад