Unscored severity · published Aug 5, 2008
CVE-2008-3482
Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BH
BB Hcm511 · Panasonic
3.20 · source: NVD
BH
BB Hcm515 · Panasonic
3.20 · source: NVD
BH
BB Hcm527 · Panasonic
3.30 · source: NVD
BH
BB Hcm531 · Panasonic
3.20 · source: NVD
BH
BB Hcm580 · Panasonic
3.21 · source: NVD
BH
BB Hcm581 · Panasonic
3.21 · source: NVD
BC
BL C111 · Panasonic
3.14 · source: NVD
BC
BL C131 · Panasonic
3.14 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3482
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3482
jvn.jp
http://jvn.jp/en/jp/JVN33706820/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html
Patch
http://panasonic.net/pcc/support/netwkcam/support/info_xss.html
Vendor Advisory
http://secunia.com/advisories/31304
www.vupen.com
http://www.vupen.com/english/advisories/2008/2257/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/44118