Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A…
Priority LOW 11Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Fujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12.0L10B, V12.0L20 and V13.0.0 allows local users to obtain sensitive information by extracting the decoding password from certain "self-decoding" file types.
Why it matters now
EPSS 0.00246 16th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:fujitsu:fence:2:*:pro:*:*:*:*:* | 2 | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:fence:3:*:pro:*:*:*:*:* | 3 | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:fence:4:*:pro:*:*:*:*:* | 4 | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l10:*:*:*:*:*:*:* | v12.0l10 | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l10a:*:*:*:*:*:*:* | v12.0l10a | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l10b:*:*:*:*:*:*:* | v12.0l10b | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l20:*:*:*:*:*:*:* | v12.0l20 | Vulnerable | Fujitsu |
| cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v13.0.0:*:*:*:*:*:*:* | v13.0.0 | Vulnerable | Fujitsu |
- cpe:2.3:a:fujitsu:fence:2:*:pro:*:*:*:*:* Versions 2 Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:fence:3:*:pro:*:*:*:*:* Versions 3 Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:fence:4:*:pro:*:*:*:*:* Versions 4 Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l10:*:*:*:*:*:*:* Versions v12.0l10 Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l10a:*:*:*:*:*:*:* Versions v12.0l10a Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l10b:*:*:*:*:*:*:* Versions v12.0l10b Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v12.0l20:*:*:*:*:*:*:* Versions v12.0l20 Vulnerable ·Fujitsu
- cpe:2.3:a:fujitsu:systemwalker_desktop_encryption:v13.0.0:*:*:*:*:*:*:* Versions v13.0.0 Vulnerable ·Fujitsu
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-1505
- 2026-10-03 Alias added: GHSA-x267-rphg-mx88
References
Sources
- CVE-2007-1505 · CVE Program
- CVE-2007-1505 · NVD
- FIRST EPSS
- GHSA-x267-rphg-mx88 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences