Description (CNA)
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based buffer overflows, which may lead to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Panasonic / FPWIN Pro | affected Version 7.3.0.0 and prior |
CWE
CWE-122
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02
- http://www.securityfocus.com/bid/108683
- https://www.zerodayinitiative.com/advisories/ZDI-19-565/
- https://www.zerodayinitiative.com/advisories/ZDI-19-567/
ADP enrichment
No English description supplied.