CVE-2023-28728

2023-07-2107:15:09

CWE-121

CWE-787

[email protected]

web.nvd.nist.gov

cve-2023-28728

panasonic control fpwin pro

buffer overflow

arbitrary code execution

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

44.9%

JSON

A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specially crafted project files.

Affected configurations

NVD

Node

panasoniccontrol_fpwin_proRange≤7.6.0.3

CPENameOperatorVersion
panasonic:control_fpwin_propanasonic control fpwin prole7.6.0.3

CPE	Name	Operator	Version
panasonic:control_fpwin_pro	panasonic control fpwin pro	le	7.6.0.3

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Control FPWIN Pro",
    "vendor": "Panasonic",
    "versions": [
      {
        "status": "affected",
        "version": "7.6.0.3 and all previous versions"
      }
    ]
  }
]