exploitDog

CVE-2021-32972

Опубликовано: 09 июл. 2021

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-21-180-03
Third Party Advisory
US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-21-180-03
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:panasonic:fpwin_pro:*:*:*:*:*:*:*:*

Версия до 7.5.1.1 (включая)

EPSS

Процентиль: 36%

0.00154

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-5cr4-4crm-rrp5

github

больше 3 лет назад

Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.

EPSS

Процентиль: 36%

0.00154

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-611