Description (CNA)
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Panasonic / FPWIN Pro | affected Version 7.3.0.0 and prior |
CWE
CWE-843
References
- https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02
- http://www.securityfocus.com/bid/108683
- https://www.zerodayinitiative.com/advisories/ZDI-19-568/
- https://www.zerodayinitiative.com/advisories/ZDI-19-566/
- https://www.zerodayinitiative.com/advisories/ZDI-19-570/
ADP enrichment
No English description supplied.