CVE-2023-6315

HIGH

FPWin Pro <7.7.0.0 - Code Injection

Title source: llm
STIX 2.1

Description

Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file.

Scores

CVSS v3 7.8
EPSS 0.0003
EPSS Percentile 8.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-125
Status published
Products (1)
panasonic/fpwin_pro < 7.7.0.0
Published Dec 19, 2023
Tracked Since Feb 18, 2026