CVE-2008-3482 - Vulnerability Details - OpenCVE

Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Panasonic	Bb Hcm511 Bb Hcm515 Bb Hcm527 Bb Hcm531 Bb Hcm580 Bb Hcm581 Bl C111 Bl C131

Configuration 1 [-]

OR	cpe:2.3:h:panasonic:bb_hcm511:3.20:r01::::::
	cpe:2.3:h:panasonic:bb_hcm515:3.20:r01::::::
	cpe:2.3:h:panasonic:bb_hcm527:3.30:r01::::::
	cpe:2.3:h:panasonic:bb_hcm531:3.20:r01::::::
	cpe:2.3:h:panasonic:bb_hcm580:3.21:r00::::::
	cpe:2.3:h:panasonic:bb_hcm581:3.21:r00::::::
	cpe:2.3:h:panasonic:bl_c111:3.14:r02::::::
	cpe:2.3:h:panasonic:bl_c131:3.14:r03::::::

No data.

References

Link	Providers
http://jvn.jp/en/jp/JVN33706820/index.html
http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html
http://panasonic.net/pcc/support/netwkcam/support/info_xss.html
http://secunia.com/advisories/31304
http://www.vupen.com/english/advisories/2008/2257/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/44118

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-08-05T20:00:00

Updated: 2024-08-07T09:37:27.050Z

Reserved: 2008-08-05T00:00:00

Link: CVE-2008-3482

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2008-08-05T20:41:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-3482

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-07-31T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "JVN#33706820", "tags": ["third-party-advisory", "x_refsource_JVN"], "url": "http://jvn.jp/en/jp/JVN33706820/index.html"}, {"name": "31304", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/31304"}, {"name": "ADV-2008-2257", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2257/references"}, {"name": "panasonic-camera-error-xss(44118)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44118"}, {"name": "JVNDB-2008-000037", "tags": ["third-party-advisory", "x_refsource_JVNDB"], "url": "http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://panasonic.net/pcc/support/netwkcam/support/info_xss.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-3482", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "JVN#33706820", "refsource": "JVN", "url": "http://jvn.jp/en/jp/JVN33706820/index.html"}, {"name": "31304", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/31304"}, {"name": "ADV-2008-2257", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2257/references"}, {"name": "panasonic-camera-error-xss(44118)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44118"}, {"name": "JVNDB-2008-000037", "refsource": "JVNDB", "url": "http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html"}, {"name": "http://panasonic.net/pcc/support/netwkcam/support/info_xss.html", "refsource": "CONFIRM", "url": "http://panasonic.net/pcc/support/netwkcam/support/info_xss.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T09:37:27.050Z"}, "title": "CVE Program Container", "references": [{"name": "JVN#33706820", "tags": ["third-party-advisory", "x_refsource_JVN", "x_transferred"], "url": "http://jvn.jp/en/jp/JVN33706820/index.html"}, {"name": "31304", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/31304"}, {"name": "ADV-2008-2257", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/2257/references"}, {"name": "panasonic-camera-error-xss(44118)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44118"}, {"name": "JVNDB-2008-000037", "tags": ["third-party-advisory", "x_refsource_JVNDB", "x_transferred"], "url": "http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://panasonic.net/pcc/support/netwkcam/support/info_xss.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-3482", "datePublished": "2008-08-05T20:00:00", "dateReserved": "2008-08-05T00:00:00", "dateUpdated": "2024-08-07T09:37:27.050Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:h:panasonic:bb_hcm511:3.20:r01:*:*:*:*:*:*", "matchCriteriaId": "1784F9D9-91D9-4DF2-913F-A6CC26779B68", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bb_hcm515:3.20:r01:*:*:*:*:*:*", "matchCriteriaId": "66CA6447-D421-45FB-AC4C-E001CE69EE26", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bb_hcm527:3.30:r01:*:*:*:*:*:*", "matchCriteriaId": "8B1C32D8-DE82-4091-8302-BA2FAA95AF1C", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bb_hcm531:3.20:r01:*:*:*:*:*:*", "matchCriteriaId": "C0B7EF08-3F63-4CF4-9FCF-5147099CD361", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bb_hcm580:3.21:r00:*:*:*:*:*:*", "matchCriteriaId": "B770DE45-5284-4F7D-A51B-B5686E5A729F", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bb_hcm581:3.21:r00:*:*:*:*:*:*", "matchCriteriaId": "C66594EF-52EA-45FD-A917-ACAEB460EC3F", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bl_c111:3.14:r02:*:*:*:*:*:*", "matchCriteriaId": "CDF71D46-6B95-4C59-A4A0-31E0C681AE27", "vulnerable": true}, {"criteria": "cpe:2.3:h:panasonic:bl_c131:3.14:r03:*:*:*:*:*:*", "matchCriteriaId": "D26C5316-22E7-46DB-9FB0-DA655C5622A0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the error page feature in Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, and BB-HCM515 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de secuencia de comandos en sitios cruzados (XSS) en la caracter\u00edstica de la p\u00e1gina de error en Panasonic Network Camera BL-C111, BL-C131, BB-HCM511, BB-HCM531, BB-HCM580, BB-HCM581, BB-HCM527, y BB-HCM515, que permite a los atacantes remotos insertar arbitrariamente una secuencia web o HTML a trav\u00e9s de vestores no especificados."}], "id": "CVE-2008-3482", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2008-08-05T20:41:00.000", "references": [{"source": "cve@mitre.org", "url": "http://jvn.jp/en/jp/JVN33706820/index.html"}, {"source": "cve@mitre.org", "url": "http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://panasonic.net/pcc/support/netwkcam/support/info_xss.html"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31304"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/2257/references"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44118"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://jvn.jp/en/jp/JVN33706820/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://jvndb.jvn.jp/contents/ja/2008/JVNDB-2008-000037.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://panasonic.net/pcc/support/netwkcam/support/info_xss.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/31304"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/2257/references"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44118"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}