SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPanasonic Video Insight Vms
APPPanasonic≤ 7.3.2.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
SQLi
CWE
Powiązane podatności
CVE-2021-20623CRITICAL9.8ten sam produkt
Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system use...
CVE-2019-5997CRITICAL9.8ten sam produkt
Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspeci...
CVE-2023-28727CRITICAL9.6ten sam vendor
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandli...
CVE-2020-11716CRITICAL9.8ten sam vendor
Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions....
CVE-2020-11715CRITICAL9.8ten sam vendor
Panasonic P99 devices through 2020-04-10 have Incorrect Access Control. NOTE: the vendor states that all affec...