| |
Vulnerability CVE-2021-32972
Published: 2021-07-09
| Description: |
Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software. |
Type:
CWE-611 (Information Exposure Through XML External Entity Reference)
CVSS2 => (AV:N/AC:M/Au:N/C:P/I:N/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
4.3/10 |
2.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
https://us-cert.cisa.gov/ics/advisories/icsa-21-180-03
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
