Panasonic Home Unit KX-HJB1000 CVE-2017-2132 Arbitrary File Deletion Vulnerability

Bugtraq ID:	101584
Class:	Design Error
CVE:	CVE-2017-2132
Remote:	Yes
Local:	No
Published:	Oct 17 2017 12:00AM
Updated:	Dec 19 2017 08:00PM
Credit:	Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc.
Vulnerable:	Panasonic Home unit KX-HJB1000 HJB1000_4.47 Panasonic Home unit KX-HJB1000 GHX1YG 14.50
Not Vulnerable:

Panasonic Home Unit KX-HJB1000 CVE-2017-2132 Arbitrary File Deletion Vulnerability

Panasonic Home Unit KX-HJB1000 is prone to an arbitrary-file-deletion vulnerability.

An attacker can exploit this issue to delete arbitrary files on a vulnerable computer with the affected application.

Panasonic Home Unit KX-HJB1000 CVE-2017-2132 Arbitrary File Deletion Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Panasonic Home Unit KX-HJB1000 CVE-2017-2132 Arbitrary File Deletion Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Panasonic Home Unit KX-HJB1000 CVE-2017-2132 Arbitrary File Deletion Vulnerability

References:

• Home unit software update information (Panasonic)
  
• Panasonic Homepage (Panasonic)
  
• JVN#54795166: Home unit KX-HJB1000 contains multiple vulnerabilities (JP-CERT)