PT-2016-5980

CVE-2016-4497

·

Published

2016-05-11

·

Updated

2016-11-28

Description by

CVSS 2.0
6.8
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Panasonic FPWIN Pro versions 5.x through 7.x before 7.130
Description The issue allows local users to cause a denial of service or possibly have unspecified other impact. It is related to "type confusion" and can be leveraged via certain vectors. There is also a mention of a Type Confusion Remote Code Execution Vulnerability, but details about real-world incidents or the estimated number of potentially affected devices are not provided.
Recommendations For versions 5.x through 7.x before 7.130, update to version 7.130 or later to resolve the issue. As a temporary workaround, consider restricting access to the DeleteAndCreateSysRegDecls And SaveSysRegDeclsDatabaseIdsToTheSysRegDeclInfoMap function until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-16-334
Found an issue in the description? Have something to add? Feel free to write us 👾