Local Denial of Service Vulnerability in Panasonic FPWIN Pro Software
CVE-2016-4497

4.2MEDIUM

Key Information:

Vendor

Panasonic

Status
Fpwin Pro
Vendor
CVE Published:
12 May 2016

What is CVE-2016-4497?

Panasonic FPWIN Pro versions 5.x to 7.x prior to 7.130 contain a vulnerability that allows local users to potentially disrupt services or experience unspecified impacts through 'type confusion' techniques. This issue highlights the importance of ensuring that software is kept updated to mitigate risks associated with local access and denial of service conditions.

References

http://zerodayinitiative.com/advisories/ZDI-16-334/
x_refsource_MISC
https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01
x_refsource_MISC
http://www.securityfocus.com/bid/90523
vdb-entryx_refsource_BID

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.