Panasonic FPWIN Pro
view advisory published 2021-06-29
Successful exploitation of this vulnerability could allow a remote attacker to retrieve sensitive information from the file system where affected software is installed.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-32972US | medium5.5 | — | ||
Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationFPWIN Pro programming control software
Panasonic has released FPWIN Pro v7.5.2.0 to address this vulnerability.
https://industry.panasonic.eu/factory-automation/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan