What’s Vulnerable › Vulnerabilities

CVE-2019-6532

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-07 · updated 2026-06-17
• Weakness: CWE-843

Description

Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors because the resource does not have expected properties. This may lead to remote code execution.

Affected products

• Panasonic Control FPWIN Pro: through 7.3.0.0

References

• http://www.securityfocus.com/bid/108683
• https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02
• https://www.zerodayinitiative.com/advisories/ZDI-19-566/
• https://www.zerodayinitiative.com/advisories/ZDI-19-568/
• https://www.zerodayinitiative.com/advisories/ZDI-19-570/
• http://www.securityfocus.com/bid/108683
• https://ics-cert.us-cert.gov/advisories/ICSA-19-157-02
• https://www.zerodayinitiative.com/advisories/ZDI-19-566/
• https://www.zerodayinitiative.com/advisories/ZDI-19-568/
• https://www.zerodayinitiative.com/advisories/ZDI-19-570/

Get alerted when CVE-2019-6532 or the next vulnerability affects your stack