CVE-2017-2133: SQL Injection

Published Oct 20, 2017

Updated

SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Affected Software

3 affected components

Panasonic Kx-hjb1000 Firmware=ghx1yg_14.50

Panasonic Kx-hjb1000 Firmware=hjb1000_4.47

Panasonic KX-HJB1000

Event History

Oct 20, 2017

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2017-2133?

CVE-2017-2133 is rated as a high-severity vulnerability due to its potential for SQL injection.

How do I fix CVE-2017-2133?

To fix CVE-2017-2133, update the firmware of Panasonic KX-HJB1000 devices to the latest version available.

Who is affected by CVE-2017-2133?

CVE-2017-2133 affects users of Panasonic KX-HJB1000 home unit devices running firmware versions GHX1YG 14.50 or HJB1000_4.47.

What kind of attack can exploit CVE-2017-2133?

CVE-2017-2133 can be exploited by authenticated attackers to execute arbitrary SQL commands on the vulnerable device.

Is my Panasonic KX-HJB1000 device vulnerable to CVE-2017-2133?

If your Panasonic KX-HJB1000 device is running firmware GHX1YG 14.50 or HJB1000_4.47, it is vulnerable to CVE-2017-2133.