Skip to main content

Fpwin Pro CVE-2016-4497

MEDIUM
Improper Input Validation (CWE-20)
2016-05-12 ics-cert@hq.dhs.gov
4.2
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
4.2 MEDIUM
AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

1
CVE Published
May 12, 2016 - 01:59 cve.org
MEDIUM 4.2

DescriptionCVE.org

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

AnalysisAI

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion.". Rated medium severity (CVSS 4.2). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." Affected products include: Panasonic Fpwin Pro. Version information: through 7..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Share

CVE-2016-4497 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy