PT-2020-17107 · Panasonic · Wv-S2231L

Published 2020-12-28 · Updated 2020-12-30 · CVE-2020-29193

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panasonic Security System WV-S2231L version 4.25

Description The issue concerns an insecure hard-coded password, which is 'lkjhgfdsa', the reverse order of the asdf keyboard row.

Recommendations For Panasonic Security System WV-S2231L version 4.25, consider changing the default password to a secure one as a temporary workaround, until a patch is available. Restrict access to the system to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-29193

Affected Products

Wv-S2231L

References · 6

• https://security.panasonic.com/products_technology/products/wv-s2231l · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-29193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29193 · Security Note
• https://github.com/cecada/Panasonic-WV-S2231L/blob/main/README.md · Note
• https://t.me/cvenotify/7812 · Telegram Post
• https://t.me/cibsecurity/21345 · Telegram Post