{"api_version":"1","generated_at":"2026-07-23T21:09:50+00:00","cve":"CVE-2018-0676","urls":{"html":"https://cve.report/CVE-2018-0676","api":"https://cve.report/api/cve/CVE-2018-0676.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2018-0676","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-0676"},"summary":{"title":"CVE-2018-0676","description":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","state":"PUBLIC","assigner":"vultures@jpcert.or.jp","published_at":"2019-01-09 23:29:00","updated_at":"2019-02-11 13:52:00"},"problem_types":["CWE-287"],"metrics":[],"references":[{"url":"https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3","name":"https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3","refsource":"MISC","tags":["Vendor Advisory"],"title":"ファームウェアのアップデートに関するお知らせ | Panasonic サポート情報 パソコン周辺機器(P3) Q&A","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://jvn.jp/en/jp/JVN65082538/index.html","name":"JVN#65082538","refsource":"JVN","tags":["Third Party Advisory"],"title":"JVN#65082538: Multiple vulnerabilities in Panasonic BN-SDWBP3","mime":"text/xml","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0676","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0676","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2018","cve_id":"676","vulnerable":"-1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"panasonic","cpe5":"bn-sdwbp3","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"676","vulnerable":"0","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"panasonic","cpe5":"bn-sdwbp3","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2018","cve_id":"676","vulnerable":"1","versionEndIncluding":"1.0.9","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"panasonic","cpe5":"bn-sdwbp3_firmware","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2018-0676","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"BN-SDWBP3","version":{"version_data":[{"version_value":"firmware version 1.0.9 and earlier"}]}}]},"vendor_name":"Panasonic Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Authentication bypass"}]}]},"references":{"reference_data":[{"name":"JVN#65082538","refsource":"JVN","url":"https://jvn.jp/en/jp/JVN65082538/index.html"},{"name":"https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3","refsource":"MISC","url":"https://p3.support.panasonic.com/faq/show/5017?&site_domain=p3"}]}},"nvd":{"publishedDate":"2019-01-09 23:29:00","lastModifiedDate":"2019-02-11 13:52:00","problem_types":["CWE-287"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:P/A:P","accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"severity":"MEDIUM","exploitabilityScore":6.5,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"AND","children":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:o:panasonic:bn-sdwbp3_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.9","cpe_name":[]}]},{"operator":"OR","children":[],"cpe_match":[{"vulnerable":false,"cpe23Uri":"cpe:2.3:h:panasonic:bn-sdwbp3:-:*:*:*:*:*:*:*","cpe_name":[]}]}],"cpe_match":[]}]}},"legacy_mitre":{"record":{"CveYear":"2018","CveId":"676","Ordinal":"115521","Title":"CVE-2018-0676","CVE":"CVE-2018-0676","Year":"2018"},"notes":[{"CveYear":"2018","CveId":"676","Ordinal":"1","NoteData":"BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execute an arbitrary command via unspecified vectors.","Type":"Description","Title":null},{"CveYear":"2018","CveId":"676","Ordinal":"2","NoteData":"2019-01-09","Type":"Other","Title":"Published"},{"CveYear":"2018","CveId":"676","Ordinal":"3","NoteData":"2019-01-09","Type":"Other","Title":"Modified"}]}}}