VULNERABILITY INTELLIGENCE

CVE-2021-32972

CVSS score5.5 MEDIUM
EPSS probability0.69%
CISA KEVNot currently listed
Published2021-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Panasonic FPWIN Pro, all Versions 7.5.1.1 and prior, allows an attacker to craft a project file specifying a URI that causes the XML parser to access the URI and embed the contents, which may allow the attacker to disclose information that is accessible in the context of the user executing software.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-611

Primary references