Denial of Service Vulnerability in Panasonic FPWIN Pro Software
CVE-2016-4498

5.5MEDIUM

Key Information:

Vendor

Panasonic

Status
Fpwin Pro
Vendor
CVE Published:
12 May 2016

What is CVE-2016-4498?

The Panasonic FPWIN Pro software, version 5.x through 7.x prior to 7.130, is susceptible to a vulnerability that arises from the use of an uninitialized pointer. This flaw could allow local users to disrupt the service, potentially leading to a denial of service. The impact may vary as it depends on unknown vectors, making it crucial for users to assess their exposure to this risk and implement necessary protective measures.

References

http://www.securityfocus.com/bid/90521
vdb-entryx_refsource_BID
https://ics-cert.us-cert.gov/advisories/ICSA-16-131-01
x_refsource_MISC
http://zerodayinitiative.com/advisories/ZDI-16-332/
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.