PT-2023-24982 · Panasonic · Panasonic Kw Watcher

Published 2023-09-05 · Updated 2023-09-08 · CVE-2023-3471

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panasonic KW Watcher versions 1.00 through 2.82

Description A buffer overflow issue may allow attackers to execute arbitrary code.

Recommendations For Panasonic KW Watcher versions 1.00 through 2.82, update to a version outside of the affected range to resolve the issue. As a temporary workaround, consider restricting access to the software to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2023-3471

Affected Products

Panasonic Kw Watcher

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-3471 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3471 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1699374698339958828 · Twitter Post
• https://t.me/cibsecurity/69972 · Telegram Post
• https://twitter.com/CVEnew/status/1699280800196301237 · Twitter Post
• https://www3.panasonic.biz/ac/j/fasys/software_info/eco/tol_kwwatcher.jsp · Note
• https://www3.panasonic.biz/ac/e/fasys/software_info/eco/kwwatcher_versioninfo.jsp · Note