Panasonic vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-11223 Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the sHigh 8.4 · Oct 3, 2025
• CVE-2025-1073 Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker with physical access to load unauthorized firmware onto the device.High 7.5 · Apr 10, 2025
• CVE-2023-6315 Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted proHigh 7.8 · Dec 18, 2023
• CVE-2023-6314 Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted projectHigh 7.8 · Dec 18, 2023
• CVE-2023-3472 Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.High 8.6 · Sep 6, 2023
• CVE-2023-3471 Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.High 8.6 · Sep 6, 2023
• CVE-2023-28730 A memory corruption vulnerability Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specialHigh 7.8 · Jul 21, 2023
• CVE-2023-28729 A type confusion vulnerability in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening specialHigh 7.8 · Jul 21, 2023
• CVE-2023-28728 A stack-based buffer overflow in Panasonic Control FPWIN Pro versions 7.6.0.3 and all previous versions may allow arbitrary code execution when opening speciallHigh 7.8 · Jul 21, 2023
• CVE-2023-28727 Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers.Critical 9.6 · Mar 31, 2023
• CVE-2023-28726 Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands.High 7.5 · Mar 31, 2023
• CVE-2022-4621 Panasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allow an attacker to perform changes with aHigh 7.5 · Jan 17, 2023
• CVE-2021-20623 Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted requestCritical 9.8 · Feb 5, 2021
• CVE-2020-16236 FPWIN Pro is vulnerable to an out-of-bounds read vulnerability when a user opens a maliciously crafted project file, which may allow an attacker to remotely exeHigh 7.8 · Jan 26, 2021
• CVE-2020-29194 Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to restore administrative coHigh 7.5 · Dec 28, 2020
• CVE-2020-11716 Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions.Critical 9.8 · May 20, 2020
• CVE-2019-5997 Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors.Critical 9.8 · May 20, 2020
• CVE-2020-11715 Panasonic P99 devices through 2020-04-10 have Incorrect Access Control.Critical 9.8 · May 19, 2020
• CVE-2019-15429 The Panasonic ELUGA_I9 Android device with a build fingerprint of Panasonic/ELUGA_I9/ELUGA_I9:7.0/NRD90M/1501740649:user/release-keys contains a pre-installed aHigh 7.8 · Nov 14, 2019
• CVE-2019-6532 Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user triggering incompatible type errors beHigh 7.8 · Jun 7, 2019
• CVE-2019-6530 Panasonic FPWIN Pro version 7.3.0.0 and prior allows attacker-created project files to be loaded by an authenticated user causing heap-based buffer overflows, wHigh 7.8 · Jun 7, 2019
• CVE-2018-16183 An unquoted search path vulnerability in some pre-installed applications on Panasonic PC run on Windows 7 (32bit), Windows 7 (64bit), Windows 8 (64bit), WindowsHigh 7.8 · Jan 9, 2019
• CVE-2018-0676 BN-SDWBP3 firmware version 1.0.9 and earlier allows an attacker on the same network segment to bypass authentication to access to the management screen and execHigh 8.8 · Jan 9, 2019
• CVE-2017-2133 SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attackers to execute arbitHigh 8.8 · Oct 20, 2017
• CVE-2017-2132 Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary files in a specific directory via unspecHigh 7.5 · Oct 20, 2017