JVN#19748237: Multiple vulnerabilities in Panasonic AiSEG2

Panasonic AiSEG2 contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2023-28726 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H| Base Score: 7.5 CVSS v2| AV:N/AC:H/Au:S/C:C/I:C/A:C| Base Score: 7.1 Improper Authentication...

CVE-2023-28727

CVE-2023-28727 affects Panasonic AiSEG2 firmware versions 2.00J–2.93A. The issue is an authentication bypass caused by mishandling of the X-Forwarded-For header, enabling adjacent attackers to bypass authentication. Public sources in the connected data confirm the product (AiSEG2) and affected ra...

CVE-2023-28726

Panasonic AiSEG2 firmware versions 2.80F–2.93A are affected by CVE-2023-28726, an OS command injection vulnerability. The issue allows a remote attacker who can access the device to execute arbitrary operating system commands. Connected sources confirm the affected range and remediation guidance:...