CVE-2019-6532 Vulnerability Details

  /     /     /  

CVE-2019-6532 Metadata Quick Info

CVE Published: 07/06/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: icscert | Vendor: Panasonic | Product: FPWIN Pro
Status : PUBLISHED

---

CVE-2019-6532 Description

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-843
CWE Name: ACCESS OF RESOURCE USING INCOMPATIBLE TYPE ( TYPE CONFUSION ) CWE-843
Source: Panasonic

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).