2 lines
5.2 KiB
JSON
2 lines
5.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Sanyo CCTV Network Camera","vendor":"Panasonic","versions":[{"status":"affected","version":"VCC-HD5600P version 2.03-06 "},{"status":"affected","version":"VDC-HD3300P version 2.03-08 "},{"status":"affected","version":"VDC-HD3300P version 1.02-05 "},{"status":"affected","version":"VCC-HD3300 version 2.03-02 "},{"status":"affected","version":"VDC-HD3100P version 2.03-00 "},{"status":"affected","version":"VCC-HD2100P version 2.03-02 "}]}],"source":"ics-cert@hq.dhs.gov"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:panasonic:vcc-hd5600p_firmware:2.03-06:*:*:*:*:*:*:*","matchCriteriaId":"6092D5A0-D160-419D-9331-474596BDC352","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:panasonic:vcc-hd5600p:-:*:*:*:*:*:*:*","matchCriteriaId":"BEEE23B6-A8AF-4DFE-8DA4-7F1D8866204E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:panasonic:vcc-hd3300p_firmware:1.02-05:*:*:*:*:*:*:*","matchCriteriaId":"4FACF605-7033-4B1A-9BEA-EB73FAC16701","vulnerable":true},{"criteria":"cpe:2.3:o:panasonic:vcc-hd3300p_firmware:2.03-08:*:*:*:*:*:*:*","matchCriteriaId":"5D068E9E-EF01-4054-A3E5-DEB3D2F88483","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:panasonic:vcc-hd3300p:-:*:*:*:*:*:*:*","matchCriteriaId":"B47AC573-A35B-4643-A768-6BA516FFC915","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:panasonic:vcc-hd3300_firmware:2.03-02:*:*:*:*:*:*:*","matchCriteriaId":"0C8B7EDD-1958-4502-84EA-40AA4D6A7EFB","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:panasonic:vcc-hd3300:-:*:*:*:*:*:*:*","matchCriteriaId":"3F45BFB2-D9FE-4E19-A93C-C527B249421A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:panasonic:vcc-hd2100p_firmware:2.03-02:*:*:*:*:*:*:*","matchCriteriaId":"175E7140-7D6E-4875-97D1-76F89F0DD0BC","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:panasonic:vcc-hd2100p:-:*:*:*:*:*:*:*","matchCriteriaId":"58EB1D22-E611-4C6D-9208-82E5BD18C4E2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:panasonic:vcc-hd3100p_firmware:2.03-00:*:*:*:*:*:*:*","matchCriteriaId":"348D6672-A6C5-4C69-B1A6-BC4B8DD3D2C0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:panasonic:vcc-hd3100p:-:*:*:*:*:*:*:*","matchCriteriaId":"D7FEAB1E-2A1F-45F8-B317-CBBE242FFD03","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are \nvulnerable to CSRFs that can be exploited to allow an attacker to \nperform changes with administrator level privileges. \n\n\n\n"},{"lang":"es","value":"Las cámaras de red Panasonic Sanyo CCTV en las versiones 1.02-05 y 2.03-0x son vulnerables a CSRF que pueden explotarse permitiendo que un atacante realice cambios con privilegios de nivel de administrador."}],"id":"CVE-2022-4621","lastModified":"2026-06-17T05:21:21.940","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"ics-cert@hq.dhs.gov","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4621","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-01-16T20:57:19.648173Z","version":"2.0.3"}}]},"published":"2023-01-17T17:15:11.730","references":[{"source":"ics-cert@hq.dhs.gov","tags":["Vendor Advisory"],"url":"https://archives.connect.panasonic.com/security/sanyo/index.html"},{"source":"ics-cert@hq.dhs.gov","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-04"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://archives.connect.panasonic.com/security/sanyo/index.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-04"}],"sourceIdentifier":"ics-cert@hq.dhs.gov","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-352"}],"source":"ics-cert@hq.dhs.gov","type":"Secondary"}]}
|