PT-2020-2735 · Panasonic · Video Insight Vms

Published 2020-05-20 · Updated 2026-02-23 · CVE-2019-5997

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Video Insight VMS versions prior to 7.6.1

Description The issue is caused by insufficient validation of user-provided data, allowing a remote attacker to execute arbitrary code by sending a specially crafted malicious request. This can lead to code injection attacks via unspecified vectors.

Recommendations For versions prior to 7.6.1, update to version 7.6.1 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2020-02813

CVE-2019-5997

Affected Products

Video Insight Vms

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2019-5997 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5997 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02813 · Security Note
• https://t.me/cveNotify/152882 · Telegram Post
• https://t.me/cibsecurity/12181 · Telegram Post
• http://downloadvi.com/downloads/IPServer/v7.6/76148/v76148RN.pdf · Note
• https://jvn.jp/en/jp/JVN96646182/index.html · Note
• https://t.me/cvenotify/3928 · Telegram Post
• https://t.me/cvenotify/54205 · Telegram Post