JVN#42252698: Panasonic Video Insight VMS vulnerable to arbitrary code execution

Video Insight VMS provided by Panasonic Corporation contains an arbitrary code execution vulnerability (CWE-94) because unencrypted communication exists in the communication using non-well known ports.

Impact

By sending a specially crafted request to the vulnerable product, a remoto attacker may execute arbitrary code with the system user privilege.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.

Products Affected

• Video Insight VMS versions prior to 7.8