PT-2017-15196 · Panasonic · Kx-Hjb1000

Taizoh Tsukamoto · Published 2017-10-20 · Updated 2017-11-08 · CVE-2017-2131

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000 4.47

Description The issue allows an attacker to bypass access restrictions and view the configuration menu. The exact method of exploitation is not specified.

Recommendations For firmware GHX1YG 14.50, update to a version that addresses this issue. For firmware HJB1000 4.47, update to a version that addresses this issue. As a temporary workaround, consider restricting access to the configuration menu until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-2131

Affected Products

Kx-Hjb1000

References · 4

• https://osv.dev/vulnerability/CVE-2017-2131 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-2131 · Security Note
• http://securityfocus.com/bid/101581 · Note
• https://jvn.jp/en/jp/JVN54795166 · Note