CVE-2021-32972

2021-07-0910:13:09

CWE-611

icscert

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.0%

JSON

Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.

CNA Affected

[
  {
    "product": "Panasonic FPWIN Pro",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All Versions 7.5.1.1 and prior"
      }
    ]
  }
]

References

us-cert.cisa.gov/ics/advisories/icsa-21-180-03