CVE-2022-4621: Panasonic Sanyo CCTV Network Camera

Published Jan 17, 2023

Updated

Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allow an attacker to perform changes with administrator level privileges.

Affected Software

17 affected components

Panasonic VCC-HD5600P version 2.03-06

Panasonic VDC-HD3300P version 2.03-08

Panasonic VDC-HD3300P version 1.02-05

Panasonic VCC-HD3300 version 2.03-02

Panasonic VDC-HD3100P version 2.03-00

Panasonic VCC-HD2100P version 2.03-02

Panasonic Vcc-hd5600p Firmware=2.03-06

Panasonic Vcc-hd5600p

Panasonic Vcc-hd3300p Firmware=1.02-05

Panasonic Vcc-hd3300p Firmware=2.03-08

Panasonic Vcc-hd3300p

Panasonic Vcc-hd3300 Firmware=2.03-02

Panasonic Vcc-hd3300

Panasonic Vcc-hd2100p Firmware=2.03-02

Panasonic Vcc-hd2100p

Panasonic Vcc-hd3100p Firmware=2.03-00

Panasonic Vcc-hd3100p

Remediation

Information

Panasonic has stated that Sanyo Electric Camera Systems are no longer in production and released this advisory https://archives.connect.panasonic.com/security/sanyo/index.html . All repair requests and other support requests via email or phone will be available.

Event History

Jan 17, 2023

CVE Published

via MITRE·04:36 PM

Data Sourced

via MITRE·04:36 PM

RemedyDescriptionSeverityWeakness

Aug 3, 2024

Data Sourced

via ICS·01:55 AM

SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-012-04

Frequently Asked Questions

What is the vulnerability identifier for this cybersecurity vulnerability?

The vulnerability identifier for this vulnerability is CVE-2022-4621.

Which software versions are affected by this vulnerability?

Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are affected by this vulnerability.

What is the severity of CVE-2022-4621?

The severity of CVE-2022-4621 is high with a severity score of 8.8.

How can an attacker exploit this vulnerability?

An attacker can exploit this vulnerability to perform changes with administrator level privileges.

Are there any references available regarding this vulnerability?

Yes, you can find references for this vulnerability at the following URLs: - [Panasonic Sanyo Security Advisories](https://archives.connect.panasonic.com/security/sanyo/index.html) - [US-CERT ICS Advisory](https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-04)