Type Confusion Vulnerability in Panasonic Control FPWIN Pro Software
CVE-2023-28729

7.8HIGH

Key Information:

Vendor

Panasonic

Status
Control Fpwin Pro
Vendor
CVE Published:
21 July 2023

What is CVE-2023-28729?

A type confusion vulnerability exists in Panasonic Control FPWIN Pro versions 7.6.0.3 and prior, potentially enabling malicious actors to execute arbitrary code via specially crafted project files. This vulnerability raises significant concerns for users, as it could compromise the integrity and security of automation processes relying on this software.

Affected Version(s)

Control FPWIN Pro 7.6.0.3 and all previous versions

References

https://industry.panasonic.eu/factory-automation/programm...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.