GCVE - cpe:2.3:a:panasonic:fpwin_pro:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:panasonic:fpwin_pro:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Panasonic (`f62a98f8-080b-54c2-8046-6c5410299138`)
Product	Fpwin Pro (`36b512f7-595c-50d3-ad0b-5905d7166ae5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-6315`	vulnerable	2026-06-08 06:19:46.913734	Details available HIGH (7.8) Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file. Published: 2023-12-19T00:25:12.122Z Updated: 2024-09-24T14:14:13.807Z Open on db.gcve.eu Reference links https://industry.panasonic.eu/products/automation-devices-solutions/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6314`	vulnerable	2026-06-08 06:19:46.913249	Details available HIGH (7.8) Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file. Published: 2023-12-19T00:24:37.946Z Updated: 2024-08-27T19:01:32.558Z Open on db.gcve.eu Reference links https://industry.panasonic.eu/products/automation-devices-solutions/programmable-logic-controllers-plc/plc-software/programming-software-control-fpwin-pro	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32972`	vulnerable	2026-06-08 05:32:08.294139	Details available Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software. Published: 2021-07-09T10:13:09.000Z Updated: 2024-08-03T23:33:56.206Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-180-03	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-16236`	vulnerable	2026-06-08 05:19:27.810472	anasonic FPWIN Pro FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code. Published: 2021-01-25T18:46:40.532Z Updated: 2024-09-16T22:15:45.566Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-21-005-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6532`	vulnerable	2026-06-08 05:14:11.840046	Details available Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution. Published: 2019-06-07T13:58:48.000Z Updated: 2024-08-04T20:23:21.586Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02 http://www.securityfocus.com/bid/108683 https://www.zerodayinitiative.com/advisories/ZDI-19-568/ https://www.zerodayinitiative.com/advisories/ZDI-19-566/ https://www.zerodayinitiative.com/advisories/ZDI-19-570/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6530`	vulnerable	2026-06-08 05:14:11.838128	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.