CVE-2024-7013 HIGH

CVE-2024-7013

Vendor Panasonic Holdings Corporation

Product Control FPWIN Pro

Weakness CWE-121

Published August 21, 2024

Last update August 21, 2024

View on NVD All CVEs

CVSS base score

7.8/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file.

Key dates

02Disclosure timeline

August 21, 2024 CVE published

August 21, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-7013 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/121.html

Related vulnerabilities

04Related CVE

CVE-2025-8727 A stack buffer overflow vulnerability exists in the Supermicro BMC Web function(SSL). CVE-2025-9246 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 check_port_conflict stack-based overflow CVE-2025-5640 PX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow CVE-2019-25328 XnConvert 1.82 - Denial of Service CVE-2024-41852 Adobe Indesign 2024 AVI File Parsing Stack Based Buffer Overflow

Identifiers

CVE CVE-2024-7013

CWE CWE-121

CVSS 7.8 / HIGH

Affected versions

Vendor Panasonic Holdings Corporation

Product Control FPWIN Pro

Affected ≤ 7.7.2.0