Vulnerability in Panasonic FPWIN Pro Software Affects Local Users
CVE-2016-4496

4.2MEDIUM

Key Information:

Vendor

Panasonic

Status
Fpwin Pro
Vendor
CVE Published:
12 May 2016

What is CVE-2016-4496?

The vulnerability found in Panasonic FPWIN Pro versions 5.x to 7.x (prior to 7.130) allows local users to exploit an out-of-bounds write condition. By triggering a crafted index value, these users can potentially cause a denial of service or other unspecified impacts, making it a critical issue for organizations relying on these versions for automation and control.

References

http://zerodayinitiative.com/advisories/ZDI-16-337/
x_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01
x_refsource_MISC
http://zerodayinitiative.com/advisories/ZDI-16-333/
x_refsource_MISC

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.