CVE-2017-2131

CVE-2017-2131 affects Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47. The vulnerability is an authentication bypass that allows a user to bypass access restrictions and view the configuration menu via unspecified vectors. This is a network-remote-style issue wit...

CVE-2017-2133

CVE-2017-2133 affects Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47. The issue is an SQL injection (CWE-89) that allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Connected sources provide affected product/versions and co...

Panasonic Home Unit KX-HJB1000 Access Bypass Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. An access bypass vulnerability exists in the Panasonic Home Unit KX-HJB1000. An attacker can use this vulnerability to bypass access restrictions and view configuration menus...

Panasonic Home Unit KX-HJB1000 SQL Injection Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. A SQL injection vulnerability exists in Home unit KX-HJB1000. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

Panasonic Home Unit KX-HJB1000 Arbitrary File Deletion Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. An arbitrary file deletion vulnerability exists in the Panasonic Home Unit KX-HJB1000. An attacker can use this vulnerability to delete arbitrary files in a directory...

JVN#54795166: Home unit KX-HJB1000 contains multiple vulnerabilities

Home unit KX-HJB1000 provided by Panasonic Corporation is a control system for home network. Home unit KX-HJB1000 contains multiple vulnerabilities listed below. Improper access control - CVE-2017-2131 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base...

csweb.lar.panasonic.com XSS vulnerability

Vulnerable URL: http://www.csweb.lar.panasonic.com:81/pines2pro/index1.jsp?msg=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| ...

panasonic.com XSS vulnerability

Open Bug Bounty ID: OBB-264936 Description| Value ---|--- Affected Website:| panasonic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

deu.faq.panasonic.com XSS vulnerability

Vulnerable URL: https://deu.faq.panasonic.com/ci/fattach/get/222/1494125549/filename/svgxss.svg Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Panasonic Smart Lock Android App Has Arbitrary Password Reset Vulnerability

Panasonic Smart Lock Android App is a smart hardware device. Panasonic Smart Lock Android App has an arbitrary password reset vulnerability. Allows an attacker to change the other party's password simply by knowing their cell phone number and obtain sensitive user information...

Panasonic, IOActive Clash on Vulnerability Report

Panasonic Avionics has pushed back against research released Tuesday by IOActive suggesting that in-flight entertainment system firmware used by more than a dozen airlines contains vulnerabilities that allow a local attacker to manipulate data displayed to passengers, or put their personal data a...

In-Flight Entertainment System Flaws Put Passenger Data at Risk

A simple tap on an in-flight entertainment system touchscreen kicked off an intellectual exercise that resulted in the discovery of a number of firmware vulnerabilities in embedded systems used by at least 13 airlines. The vulnerabilities in the Panasonic Avionics IFE firmware could allow a local...

Hacker Demonstrates How Easy In-flight Entertainment System Can Be Hacked

Next time when you hear an announcement in the flight, “Ladies and gentlemen, this is your captain speaking…," the chances are that the announcement is coming from a hacker controlling your flight. Dangerous vulnerabilities in an in-flight entertainment system used by the leading airlines,...

panasonic.com XSS vulnerability

Vulnerable URL: http://www.panasonic.com/globals/videoplayer/index.asp?xmlFile=--...

Panasonic FPWIN Pro Detection (Windows SMB Login)

Detection of installed version of Panasonic FPWIN Pro on Windows. The script logs in via smb, searches for Panasonic FPWIN Pro in the registry and gets the version from registry. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Panasonic FPWIN Pro Multiple Vulnerabilities

Panasonic FPWIN Pro is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

panasonic.com XSS vulnerability

Open Bug Bounty ID: OBB-160788 Description| Value ---|--- Affected Website:| panasonic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Panasonic FPWIN Pro 5.x < 7.130 Multiple Vulnerabilities

Binary data scadafpwin7130.nbin...

Panasonic Control FPWIN Pro Detection

Binary data scadaappfpwinproinstalled.nbin...

blogs.panasonic.com.au XSS vulnerability

Vulnerable URL: https://blogs.panasonic.com.au/business/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 28.11.2017 Latest check for patch:| 28.11.2017 02:24 GMT Vulnerability type:| XSS Vulnerability...