Fpwin Pro
Vendor:
First CVE: May 12, 2016 · Active for 10 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
5.9
Avg CVSS
Higher Avg CVSS than 18% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Fpwin Pro over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 12, 2016
10 years ago
Most Recent CVE
Dec 19, 2023
951 days ago
CVE Severity & Scoring
Fpwin Pro8 CVEs
63%
38%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local7 (87.5%)
Network1 (12.5%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (62.5%)
High3 (37.5%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required8 (100.0%)
Privileges Required
Low4 (50.0%)
High0 (0.0%)
None4 (50.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-6314HIGH Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file. | Dec 19, 2023 | 7.8 | 24 | NO | NO |
CVE-2023-6315HIGH Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file. | Dec 19, 2023 | 7.8 | 23 | NO | NO |
CVE-2020-16236HIGH FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely execute arbitrary code. | Jan 26, 2021 | 7.8 | 20 | NO | NO |
CVE-2016-4498MEDIUM Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or possibly have unspecified other impact | May 12, 2016 | 5.5 | 20 | NO | NO |
CVE-2021-32972MEDIUM Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents | Jul 9, 2021 | 5.5 | 19 | NO | NO |
CVE-2016-4499MEDIUM Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application crash) via unspecified vectors. | May 12, 2016 | 4.2 | 18 | NO | NO |
CVE-2016-4497MEDIUM Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion | May 12, 2016 | 4.2 | 18 | NO | NO |
CVE-2016-4496MEDIUM Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a cra | May 12, 2016 | 4.2 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Fpwin Pro
Top CWEs
Versions
No cataloged versions.