Denial of Service in Panasonic WV-S2231L Security System
CVE-2020-29194

7.5HIGH

Key Information:

Vendor

Panasonic

Status
Wv-s2231l Firmware
Vendor
CVE Published:
28 December 2020

What is CVE-2020-29194?

The Panasonic WV-S2231L security system version 4.25 is susceptible to a remote denial of service attack, which can interrupt access to the admin control panel. An attacker can exploit this by sending a crafted POST request to the cgi-bin/set_factory URI. Upon exploitation, administrative control becomes unavailable, necessitating a physical reset to restore normal functionality.

References

https://github.com/cecada/Panasonic-WV-S2231L/blob/main/R...
x_refsource_MISC
https://security.panasonic.com/products_technology/produc...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.