CVE-2019-6532

EPSS 3.8%CWE-843

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 3.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

07 Jun 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution.

Affected products

Panasonic · FPWIN Pro

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02 https://www.zerodayinitiative.com/advisories/ZDI-19-566/https://www.zerodayinitiative.com/advisories/ZDI-19-568/https://www.zerodayinitiative.com/advisories/ZDI-19-570/http://www.securityfocus.com/bid/108683