Panasonic records
43 published records for vendor panasonic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 7
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer6
- CWE-20 Improper Input Validation5
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')2
- CWE-121 Stack-based Buffer Overflow2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
The weakness classes this vendor ships most often: where to look.
CWEAll records
43 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2021-20623No exploit | Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specipanasonic · video insight vms · CWE-319 | Critical9.8 | — | 2.8% | Feb 5, 2021 |
40Plan | CVE-2019-5997No exploit | Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors.panasonic · video insight vms · CWE-94 | Critical9.8 | — | 1.7% | May 20, 2020 |
39Monitor | CVE-2020-11715No exploit | Panasonic P99 devices through 2020-04-10 have Incorrect Access Control.panasonic · p99 firmware | Critical9.8 | — | 1.4% | May 19, 2020 |
39Monitor | CVE-2020-11716No exploit | Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions.panasonic · eluga ray 530 firmware · CWE-276 | Critical9.8 | — | 1.3% | May 20, 2020 |
35Monitor | CVE-2019-5996No exploit | SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commpanasonic · video insight vms · CWE-89 | High8.8 | — | 1.5% | Sep 12, 2019 |
35Monitor | CVE-2017-2133No exploit | SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attackpanasonic · kx-hjb1000 firmware · CWE-89 | High8.8 | — | 1.2% | Oct 20, 2017 |
35Monitor | CVE-2023-28726No exploit | Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands.panasonic · aiseg2 firmware · CWE-78 | High8.8 | — | 0.8% | Mar 31, 2023 |
35Monitor | CVE-2018-0676No exploit | BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the managepanasonic · bn-sdwbp3 firmware · CWE-287 | High8.8 | — | 0.6% | Jan 9, 2019 |
35Monitor | CVE-2023-28727No exploit | Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.panasonic · aiseg2 firmware · CWE-287 | High8.8 | — | 0.3% | Mar 31, 2023 |
35Monitor | CVE-2022-4621No exploit | Panasonic Sanyo CCTV Network Camerapanasonic · vcc-hd5600p firmware · CWE-352 | High8.8 | — | 0.3% | Jan 17, 2023 |
33Monitor | CVE-2019-6530No exploit | Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-basedpanasonic · control fpwin pro · CWE-122 | High7.8 | — | 6.8% | Jun 7, 2019 |
32Monitor | CVE-2015-4648No exploit | Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API (PS-API) ActiveX SDpanasonic · security api activex sdk · CWE-20 | High7.5 | — | 6.2% | Jul 6, 2015 |
32Monitor | CVE-2019-6532No exploit | Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompapanasonic · control fpwin pro · CWE-843 | High7.8 | — | 3.7% | Jun 7, 2019 |
31Monitor | CVE-2018-16183No exploit | An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windowpanasonic · system interface device 0021 · CWE-428 | High7.8 | — | 1.3% | Jan 9, 2019 |
31Monitor | CVE-2020-16236No exploit | FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attapanasonic · fpwin pro · CWE-125 | High7.8 | — | 1.2% | Jan 26, 2021 |
31Monitor | CVE-2023-3471No exploit | Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.panasonic · kw watcher · CWE-119 | High7.8 | — | 0.4% | Sep 6, 2023 |
31Monitor | CVE-2019-15429No exploit | The Panasonic ELUGA_I9 Android device with a build fingerprint of Panasonic/ELUGA_I9/ELUGA_I9:7.0/NRD90M/1501740649:user/release-keys contaipanasonic · eluga i9 firmware · CWE-610 | High7.8 | — | 0.3% | Nov 14, 2019 |
31Monitor | CVE-2024-7013No exploit | Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execute arbitrary code viapanasonic holdings corporation · control fpwin pro · CWE-121 | High7.8 | — | 0.2% | Aug 21, 2024 |
31Monitor | CVE-2023-28728No exploit | A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution wpanasonic · control fpwin pro · CWE-121 | High7.8 | — | 0.2% | Jul 21, 2023 |
31Monitor | CVE-2023-6315No exploit | Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a spanasonic · fpwin pro · CWE-125 | High7.8 | — | 0.2% | Dec 18, 2023 |
31Monitor | CVE-2023-6314No exploit | Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specipanasonic · fpwin pro · CWE-787 | High7.8 | — | 0.2% | Dec 18, 2023 |
31Monitor | CVE-2023-3472No exploit | Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.panasonic · kw watcher · CWE-416 | High7.8 | — | 0.2% | Sep 6, 2023 |
31Monitor | CVE-2023-28730No exploit | A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution panasonic · control fpwin pro · CWE-119 | High7.8 | — | 0.2% | Jul 21, 2023 |
31Monitor | CVE-2023-28729No exploit | A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution panasonic · control fpwin pro · CWE-843 | High7.8 | — | 0.2% | Jul 21, 2023 |
30Monitor | CVE-2017-5151No exploit | An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions.panasonic · video insight web client · CWE-89 | High7.3 | — | 2.3% | Feb 13, 2017 |
- CVE-2021-2062340Plan
Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a speci
CriticalCVSS 9.8No exploitEPSS 2%panasonic · video insight vmsFeb 5, 2021
- CVE-2019-599740Plan
Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors.
CriticalCVSS 9.8No exploitEPSS 1%panasonic · video insight vmsMay 20, 2020
- CVE-2020-1171539Monitor
Panasonic P99 devices through 2020-04-10 have Incorrect Access Control.
CriticalCVSS 9.8No exploitEPSS 1%panasonic · p99 firmwareMay 19, 2020
- CVE-2020-1171639Monitor
Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions.
CriticalCVSS 9.8No exploitEPSS 1%panasonic · eluga ray 530 firmwareMay 20, 2020
- CVE-2019-599635Monitor
SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL comm
HighCVSS 8.8No exploitEPSS 1%panasonic · video insight vmsSep 12, 2019
- CVE-2017-213335Monitor
SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attack
HighCVSS 8.8No exploitEPSS 1%panasonic · kx-hjb1000 firmwareOct 20, 2017
- CVE-2023-2872635Monitor
Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands.
HighCVSS 8.8No exploitEPSS 0%panasonic · aiseg2 firmwareMar 31, 2023
- CVE-2018-067635Monitor
BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the manage
HighCVSS 8.8No exploitEPSS 0%panasonic · bn-sdwbp3 firmwareJan 9, 2019
- CVE-2023-2872735Monitor
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.
HighCVSS 8.8No exploitEPSS 0%panasonic · aiseg2 firmwareMar 31, 2023
- CVE-2022-462135Monitor
Panasonic Sanyo CCTV Network Camera
HighCVSS 8.8No exploitEPSS 0%panasonic · vcc-hd5600p firmwareJan 17, 2023
- CVE-2019-653033Monitor
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based
HighCVSS 7.8No exploitEPSS 6%panasonic · control fpwin proJun 7, 2019
- CVE-2015-464832Monitor
Stack-based buffer overflow in the Ipropsapi.ipropsapiCtrl.1 ActiveX control in ipropsapivideo in Panasonic Security API (PS-API) ActiveX SD
HighCVSS 7.5No exploitEPSS 6%panasonic · security api activex sdkJul 6, 2015
- CVE-2019-653232Monitor
Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompa
HighCVSS 7.8No exploitEPSS 3%panasonic · control fpwin proJun 7, 2019
- CVE-2018-1618331Monitor
An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Window
HighCVSS 7.8No exploitEPSS 1%panasonic · system interface device 0021Jan 9, 2019
- CVE-2020-1623631Monitor
FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an atta
HighCVSS 7.8No exploitEPSS 1%panasonic · fpwin proJan 26, 2021
- CVE-2023-347131Monitor
Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.
HighCVSS 7.8No exploitEPSS 0%panasonic · kw watcherSep 6, 2023
- CVE-2019-1542931Monitor
The Panasonic ELUGA_I9 Android device with a build fingerprint of Panasonic/ELUGA_I9/ELUGA_I9:7.0/NRD90M/1501740649:user/release-keys contai
HighCVSS 7.8No exploitEPSS 0%panasonic · eluga i9 firmwareNov 14, 2019
- CVE-2024-701331Monitor
Stack-based buffer overflow in Control FPWIN Pro version 7.7.2.0 and all previous versions may allow attackers to execute arbitrary code via
HighCVSS 7.8No exploitEPSS 0%panasonic holdings corporation · control fpwin proAug 21, 2024
- CVE-2023-2872831Monitor
A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution w
HighCVSS 7.8No exploitEPSS 0%panasonic · control fpwin proJul 21, 2023
- CVE-2023-631531Monitor
Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a s
HighCVSS 7.8No exploitEPSS 0%panasonic · fpwin proDec 18, 2023
- CVE-2023-631431Monitor
Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a speci
HighCVSS 7.8No exploitEPSS 0%panasonic · fpwin proDec 18, 2023
- CVE-2023-347231Monitor
Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.
HighCVSS 7.8No exploitEPSS 0%panasonic · kw watcherSep 6, 2023
- CVE-2023-2873031Monitor
A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution
HighCVSS 7.8No exploitEPSS 0%panasonic · control fpwin proJul 21, 2023
- CVE-2023-2872931Monitor
A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution
HighCVSS 7.8No exploitEPSS 0%panasonic · control fpwin proJul 21, 2023
- CVE-2017-515130Monitor
An issue was discovered in VideoInsight Web Client Version 6.3.5.11 and previous versions.
HighCVSS 7.3No exploitEPSS 2%panasonic · video insight web clientFeb 13, 2017