PT-2023-24983 · Panasonic · Panasonic Kw Watcher

Published 2023-09-05 · Updated 2023-09-08 · CVE-2023-3472

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panasonic KW Watcher versions 1.00 through 2.82

Description The issue is related to a use after free vulnerability, which may allow attackers to execute arbitrary code.

Recommendations For Panasonic KW Watcher versions 1.00 through 2.82, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-3472

Affected Products

Panasonic Kw Watcher

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-3472 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3472 · Vendor Advisory
• https://t.me/cibsecurity/69974 · Telegram Post
• https://twitter.com/CVEnew/status/1699280799298625863 · Twitter Post
• https://www3.panasonic.biz/ac/j/fasys/software_info/eco/tol_kwwatcher.jsp · Note
• https://www3.panasonic.biz/ac/e/fasys/software_info/eco/kwwatcher_versioninfo.jsp · Note