A vulnerability has been reported in various Panasonic network cameras, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed to unspecified parameters in the error page is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability is reported in the following products and versions:
* BL-C111 Ver.3.14R02 and earlier
* BL-C131 Ver.3.14R03 and earlier
* BB-HCM511 Ver.3.20R01 and earlier
* BB-HCM531 Ver.3.20R01 and earlier
* BB-HCM580 Ver.3.21R00 and earlier
* BB-HCM581 Ver.3.21R00 and earlier
* BB-HCM527 Ver.3.30R00 and earlier
* BB-HCM515 Ver.3.20R01 and earlier

Solution
Reportedly, a fixed firmware version is available. Contact the vendor for details.

Provided and/or discovered by
NetAgent Co., Ltd.

Changelog
Further details available in Customer Area

Original Advisory
http://jvn.jp/en/jp/JVN33706820/index.html

Deep Links
Links available in Customer Area