Code Injection Vulnerability in Video Insight VMS by Video Insight
CVE-2019-5997

9.8CRITICAL

Key Information:

Vendor: Panasonic Corporation
Status: Video Insight Vms
Vendor: CVE Published:; 20 May 2020

🔔 Create Panasonic Corporation Vulnerability Alert

What is CVE-2019-5997?

Video Insight VMS versions prior to 7.6.1 are susceptible to code injection attacks, enabling remote attackers to exploit unspecified vectors, leading to unauthorized execution of malicious code. This vulnerability poses a significant risk to affected systems, allowing for potential takeover and manipulation of the Video Management System. Organizations utilizing vulnerable versions are urged to update promptly to the latest version to mitigate associated risks.

Affected Version(s)

Video Insight VMS prior to 7.6.1

References

http://downloadvi.com/downloads/IPServer/v7.6/76148/v7614...

https://jvn.jp/en/jp/JVN96646182/index.html

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 20, 2020
Vulnerability Reserved
Jan 10, 2019

CVE-2019-5997 Data

JSON