Panasonic Home Unit KX-HJB1000 CVE-2017-2133 SQL Injection Vulnerability

Bugtraq ID:	101583
Class:	Input Validation Error
CVE:	CVE-2017-2133
Remote:	Yes
Local:	No
Published:	Oct 17 2017 12:00AM
Updated:	Dec 19 2017 08:00PM
Credit:	Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc.
Vulnerable:	Panasonic Home unit KX-HJB1000 HJB1000_4.47 Panasonic Home unit KX-HJB1000 GHX1YG 14.50
Not Vulnerable:

Panasonic Home Unit KX-HJB1000 CVE-2017-2133 SQL Injection Vulnerability

Panasonic Home Unit KX-HJB1000 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Panasonic Home Unit KX-HJB1000 CVE-2017-2133 SQL Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Panasonic Home Unit KX-HJB1000 CVE-2017-2133 SQL Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Panasonic Home Unit KX-HJB1000 CVE-2017-2133 SQL Injection Vulnerability

References:

• Home unit software update information (Panasonic)
  
• Panasonic Homepage (Panasonic)
  
• JVN#54795166: Home unit KX-HJB1000 contains multiple vulnerabilities (JP-CERT)