CVE-2022-4621

CVSS V2 None CVSS V3 None
Description
Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allow an attacker to perform changes with administrator level privileges.
Overview
  • CVE ID
  • CVE-2022-4621
  • Assigner
  • ics-cert@hq.dhs.gov
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-01-17T17:15:11
  • Last Modified Date
  • 2023-01-24T21:01:44
Weakness Enumerations
CWE URL
CWE-352 http://cwe.mitre.org/data/definitions/352.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:panasonic:vcc-hd5600p_firmware:2.03-06:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:panasonic:vcc-hd5600p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:panasonic:vcc-hd3300p_firmware:1.02-05:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:panasonic:vcc-hd3300p_firmware:2.03-08:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:panasonic:vcc-hd3300p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:panasonic:vcc-hd3300_firmware:2.03-02:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:panasonic:vcc-hd3300:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:panasonic:vcc-hd2100p_firmware:2.03-02:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:panasonic:vcc-hd2100p:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:panasonic:vcc-hd3100p_firmware:2.03-00:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:panasonic:vcc-hd3100p:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://archives.connect.panasonic.com/security/sanyo/index.html
https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-04
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-4621
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-4621
History
Created Old Value New Value Data Type Notes
2023-01-17 18:47:55 Added to TrackCVE
2023-01-17 18:47:57 Weakness Enumeration new
2023-01-17 19:15:27 2023-01-17T18:55:07 CVE Modified Date updated
2023-01-17 19:15:27 Received Awaiting Analysis Vulnerability Status updated
2023-01-24 14:13:51 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-01-24 21:14:54 2023-01-24T21:01:44 CVE Modified Date updated
2023-01-24 21:14:54 Undergoing Analysis Analyzed Vulnerability Status updated
2023-01-24 21:14:57 CPE Information updated