CVE-2020-16236: anasonic FPWIN Pro
Published Jan 25, 2021
·Updated
FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code.
Affected Software
2 affected components
Panasonic FPWIN Pro Version 7.5.0.0 and prior
Panasonic FPWIN Pro<7.5.0.1
Event History
Jan 25, 2021
CVE Published
via MITRE·06:46 PM
Data Sourced
via MITRE·06:46 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-16236.
2
What is the severity of CVE-2020-16236?
The severity of CVE-2020-16236 is high with a CVSS score of 7.8.
3
What is the affected software?
The affected software is FPWIN Pro version up to 7.5.0.1 by Panasonic.
4
How can an attacker exploit CVE-2020-16236?
An attacker can exploit CVE-2020-16236 by tricking a user into opening a maliciously crafted project file, allowing them to execute arbitrary code remotely.
5
Are there any references for CVE-2020-16236?
Yes, you can find more information about CVE-2020-16236 in the advisory published by CISA at the following link: https://us-cert.cisa.gov/ics/advisories/icsa-21-005-02