Lucene search

K
cvelistPanasonic_Holdings_CorporationCVELIST:CVE-2023-6315
HistoryDec 19, 2023 - 12:25 a.m.

CVE-2023-6315

2023-12-1900:25:12
Panasonic_Holdings_Corporation
www.cve.org
cve-2023-6315
out-of-bounds
fpwin pro
arbitrary code
specially crafted file

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

23.1%

Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Control FPWIN Pro",
    "vendor": "Panasonic",
    "versions": [
      {
        "lessThanOrEqual": "7.7.0.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

23.1%

Related for CVELIST:CVE-2023-6315