Panasonic FPWIN Pro
view advisory published 2021-01-05
Successful exploitation of this vulnerability could result in an out-of-bounds read, which may allow remote code execution.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-16236US | high7.8 | — | ||
FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationFPWIN Pro
For more information about these issues or other vulnerabilities in Panasonic products, please contact the Panasonic Product Security Incident Response Team.
https://www.panasonic.com/global/corporate/product-security/sec/psirt.html - FixedFPWIN Pro
Panasonic has released FPWIN Pro 7.5.0.1 software to address the vulnerability described in this advisory. The latest version of the software can be downloaded from the Panasonic website.
https://industry.panasonic.eu/factory-automation/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan