VAR-201605-0345

Vulnerability from variot - Updated: 2023-12-18 12:20

Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within processing of a project file. A specially-crafted project file will lead to a write beyond the end of a heap buffer in the createLoadContent method due to an unvalidated length that is input from the project file. An attacker can leverage this vulnerability to attain code execution under the context of the current process. Panasonic FPWIN Pro is a set of programming software for all FP series PLCs (Programmable Logic Controllers) from Panasonic Corporation of Japan. Panasonic FPWIN Pro is prone to a multiple local code-execution vulnerabilities. Failed exploit attempts will likely cause a denial-of-service condition

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201605-0345",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "fpwin pro",
        "scope": null,
        "trust": 2.8,
        "vendor": "panasonic",
        "version": null
      },
      {
        "model": "fpwin pro",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "panasonic",
        "version": null
      },
      {
        "model": "fpwin pro",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "panasonic",
        "version": "7.x"
      },
      {
        "model": "fpwin pro",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "panasonic",
        "version": "5.x from  7.130"
      },
      {
        "model": "fpwin pro",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "panasonic",
        "version": "5.x"
      },
      {
        "model": "fpwin pro",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "panasonic",
        "version": "6.x"
      },
      {
        "model": "fpwin pro",
        "scope": "lte",
        "trust": 0.6,
        "vendor": "panasonic",
        "version": "\u003c=7.122"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.2,
        "vendor": "fpwin pro",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:panasonic:fpwin_pro:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Steven Seeley of Source Incite",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      }
    ],
    "trust": 2.8
  },
  "cve": "CVE-2016-4496",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Local",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Partial",
            "baseScore": 4.4,
            "confidentialityImpact": "Partial",
            "exploitabilityScore": null,
            "id": "CVE-2016-4496",
            "impactScore": null,
            "integrityImpact": "Partial",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "Medium",
            "trust": 3.6,
            "userInteractionRequired": null,
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "acInsufInfo": false,
            "accessComplexity": "MEDIUM",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.4,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.4,
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "MEDIUM",
            "trust": 1.0,
            "userInteractionRequired": true,
            "vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CNVD-2016-03208",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.6,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "5562c54e-2351-11e6-abef-000c29c66e3d",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.2,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.9 [IVD]"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "author": "NVD",
            "availabilityImpact": "LOW",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 0.8,
            "impactScore": 3.4,
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          {
            "attackComplexity": "High",
            "attackVector": "Local",
            "author": "NVD",
            "availabilityImpact": "Low",
            "baseScore": 4.2,
            "baseSeverity": "Medium",
            "confidentialityImpact": "Low",
            "exploitabilityScore": null,
            "id": "CVE-2016-4496",
            "impactScore": null,
            "integrityImpact": "Low",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "Required",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "ZDI",
            "id": "CVE-2016-4496",
            "trust": 2.8,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2016-4496",
            "trust": 1.8,
            "value": "MEDIUM"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2016-03208",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201605-201",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "IVD",
            "id": "5562c54e-2351-11e6-abef-000c29c66e3d",
            "trust": 0.2,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by triggering a crafted index value, as demonstrated by an integer overflow. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Panasonic FPWIN Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within processing of a project file. A specially-crafted project file will lead to a write beyond the end of a heap buffer in the createLoadContent method due to an unvalidated length that is input from the project file. An attacker can leverage this vulnerability to attain code execution under the context of the current process. Panasonic FPWIN Pro is a set of programming software for all FP series PLCs (Programmable Logic Controllers) from Panasonic Corporation of Japan. Panasonic FPWIN Pro is prone to a multiple local code-execution vulnerabilities. Failed  exploit  attempts will likely cause a denial-of-service condition",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "BID",
        "id": "90520"
      },
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      }
    ],
    "trust": 5.13
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2016-4496",
        "trust": 6.3
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-16-131-01",
        "trust": 3.0
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-335",
        "trust": 2.3
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336",
        "trust": 2.3
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337",
        "trust": 2.3
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333",
        "trust": 2.3
      },
      {
        "db": "BID",
        "id": "90520",
        "trust": 1.3
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201",
        "trust": 0.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3503",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3502",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3538",
        "trust": 0.7
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-3505",
        "trust": 0.7
      },
      {
        "db": "IVD",
        "id": "5562C54E-2351-11E6-ABEF-000C29C66E3D",
        "trust": 0.2
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "BID",
        "id": "90520"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "id": "VAR-201605-0345",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      }
    ],
    "trust": 1.1189655200000002
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      }
    ]
  },
  "last_update_date": "2023-12-18T12:20:30.720000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Panasonic has issued an update to correct this vulnerability.",
        "trust": 2.8,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-131-01"
      },
      {
        "title": "FPWIN Pro",
        "trust": 0.8,
        "url": "https://www.panasonic-electric-works.com/eu/plc-software-control-fpwin-pro.htm"
      },
      {
        "title": "Patch for Panasonic FPWIN Pro Buffer Overflow Vulnerability (CNVD-2016-03208)",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/75932"
      },
      {
        "title": "Panasonic FPWIN Pro Buffer Overflow Vulnerability Fix",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=61519"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-119",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 5.8,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-131-01"
      },
      {
        "trust": 1.6,
        "url": "http://zerodayinitiative.com/advisories/zdi-16-333/"
      },
      {
        "trust": 1.6,
        "url": "http://zerodayinitiative.com/advisories/zdi-16-335/"
      },
      {
        "trust": 1.6,
        "url": "http://zerodayinitiative.com/advisories/zdi-16-336/"
      },
      {
        "trust": 1.6,
        "url": "http://zerodayinitiative.com/advisories/zdi-16-337/"
      },
      {
        "trust": 1.0,
        "url": "http://www.securityfocus.com/bid/90520"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-4496"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-4496"
      },
      {
        "trust": 0.3,
        "url": "http://panasonic.com/"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "BID",
        "id": "90520"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "db": "BID",
        "id": "90520"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-05-17T00:00:00",
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "date": "2016-05-17T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "date": "2016-05-10T00:00:00",
        "db": "BID",
        "id": "90520"
      },
      {
        "date": "2016-05-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "date": "2016-05-12T01:59:11.620000",
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-335"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-336"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-337"
      },
      {
        "date": "2016-05-11T00:00:00",
        "db": "ZDI",
        "id": "ZDI-16-333"
      },
      {
        "date": "2016-05-17T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2016-03208"
      },
      {
        "date": "2016-07-05T22:21:00",
        "db": "BID",
        "id": "90520"
      },
      {
        "date": "2016-05-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      },
      {
        "date": "2016-11-28T20:18:24.663000",
        "db": "NVD",
        "id": "CVE-2016-4496"
      },
      {
        "date": "2016-05-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "BID",
        "id": "90520"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ],
    "trust": 0.9
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Panasonic FPWIN Pro Service disruption in  (DoS) Vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2016-002709"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Buffer overflow",
    "sources": [
      {
        "db": "IVD",
        "id": "5562c54e-2351-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201605-201"
      }
    ],
    "trust": 0.8
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…