VAR-201410-0978
Vulnerability from variot - Updated: 2025-04-13 21:46Panasonic Network Camera View 3 and 4 allows remote attackers to execute arbitrary code via a crafted page, which triggers an invalid pointer dereference, related to "the ability to nullify an arbitrary address in memory.". User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the GetImageDataPrint method of the WebVideoCam ActiveX control. The issue lies in the ability to nullify an arbitrary address in memory. An attacker can leverage this vulnerability to execute code under the context of the current process. Panasonic Network Camera View is a webcam viewing app. Failed exploit attempts will likely result in denial-of-service conditions
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "network camera view",
"scope": "eq",
"trust": 1.6,
"vendor": "panasonic",
"version": "4.0"
},
{
"_id": null,
"model": "network camera view",
"scope": "eq",
"trust": 1.6,
"vendor": "panasonic",
"version": "3.0"
},
{
"_id": null,
"model": "network camera view",
"scope": "eq",
"trust": 1.4,
"vendor": "panasonic",
"version": "3"
},
{
"_id": null,
"model": "network camera view",
"scope": "eq",
"trust": 1.4,
"vendor": "panasonic",
"version": "4"
},
{
"_id": null,
"model": "network camera view",
"scope": null,
"trust": 0.7,
"vendor": "panasonic",
"version": null
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "network camera view",
"version": "3.0"
},
{
"_id": null,
"model": null,
"scope": "eq",
"trust": 0.2,
"vendor": "network camera view",
"version": "4.0"
}
],
"sources": [
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-364"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
},
{
"db": "NVD",
"id": "CVE-2014-8755"
}
]
},
"configurations": {
"_id": null,
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:panasonic:network_camera_view",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
}
]
},
"credits": {
"_id": null,
"data": "Ariele Caltabiano (kimiya)",
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-364"
}
],
"trust": 0.7
},
"cve": "CVE-2014-8755",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2014-8755",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "ZDI",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2014-8755",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "HIGH",
"trust": 0.7,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2014-07344",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.2,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-76700",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2014-8755",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2014-8755",
"trust": 0.8,
"value": "Medium"
},
{
"author": "ZDI",
"id": "CVE-2014-8755",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2014-07344",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201410-597",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-76700",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-364"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "VULHUB",
"id": "VHN-76700"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
},
{
"db": "NVD",
"id": "CVE-2014-8755"
}
]
},
"description": {
"_id": null,
"data": "Panasonic Network Camera View 3 and 4 allows remote attackers to execute arbitrary code via a crafted page, which triggers an invalid pointer dereference, related to \"the ability to nullify an arbitrary address in memory.\". User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.The specific flaw exists within the GetImageDataPrint method of the WebVideoCam ActiveX control. The issue lies in the ability to nullify an arbitrary address in memory. An attacker can leverage this vulnerability to execute code under the context of the current process. Panasonic Network Camera View is a webcam viewing app. Failed exploit attempts will likely result in denial-of-service conditions",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-8755"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "ZDI",
"id": "ZDI-14-364"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "BID",
"id": "70593"
},
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "VULHUB",
"id": "VHN-76700"
}
],
"trust": 3.33
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2014-8755",
"trust": 4.4
},
{
"db": "ZDI",
"id": "ZDI-14-364",
"trust": 3.8
},
{
"db": "BID",
"id": "70593",
"trust": 1.0
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597",
"trust": 0.9
},
{
"db": "CNVD",
"id": "CNVD-2014-07344",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2357",
"trust": 0.7
},
{
"db": "IVD",
"id": "C4A09E04-2351-11E6-ABEF-000C29C66E3D",
"trust": 0.2
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-76700",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "ZDI",
"id": "ZDI-14-364"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "VULHUB",
"id": "VHN-76700"
},
{
"db": "BID",
"id": "70593"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
},
{
"db": "NVD",
"id": "CVE-2014-8755"
}
]
},
"id": "VAR-201410-0978",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "VULHUB",
"id": "VHN-76700"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
},
{
"category": [
"camera device"
],
"sub_category": "camera",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
}
]
},
"last_update_date": "2025-04-13T21:46:23.237000Z",
"patch": {
"_id": null,
"data": [
{
"title": "Update for Network Camera View 3,4",
"trust": 1.5,
"url": "http://security.panasonic.com/pss/security/library/howto_update_NCV.html"
},
{
"title": "Panasonic Network Camera View WebVideoCam ActiveX Remote Code Execution Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/51309"
},
{
"title": "nwcv_3_4_update",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=52078"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-14-364"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-20",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-76700"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "NVD",
"id": "CVE-2014-8755"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 3.1,
"url": "http://www.zerodayinitiative.com/advisories/zdi-14-364/"
},
{
"trust": 2.4,
"url": "http://security.panasonic.com/pss/security/library/howto_update_ncv.html"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-8755"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-8755"
},
{
"trust": 0.3,
"url": "http://panasonic.com/"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "ZDI",
"id": "ZDI-14-364"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "VULHUB",
"id": "VHN-76700"
},
{
"db": "BID",
"id": "70593"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962"
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
},
{
"db": "NVD",
"id": "CVE-2014-8755"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "OTHER",
"id": null,
"ident": null
},
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d",
"ident": null
},
{
"db": "ZDI",
"id": "ZDI-14-364",
"ident": null
},
{
"db": "CNVD",
"id": "CNVD-2014-07344",
"ident": null
},
{
"db": "VULHUB",
"id": "VHN-76700",
"ident": null
},
{
"db": "BID",
"id": "70593",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2014-004962",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2014-8755",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2014-10-24T00:00:00",
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d",
"ident": null
},
{
"date": "2014-10-14T00:00:00",
"db": "ZDI",
"id": "ZDI-14-364",
"ident": null
},
{
"date": "2014-10-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-07344",
"ident": null
},
{
"date": "2014-10-17T00:00:00",
"db": "VULHUB",
"id": "VHN-76700",
"ident": null
},
{
"date": "2014-10-15T00:00:00",
"db": "BID",
"id": "70593",
"ident": null
},
{
"date": "2014-10-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-004962",
"ident": null
},
{
"date": "2014-10-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201410-597",
"ident": null
},
{
"date": "2014-10-17T15:55:08.430000",
"db": "NVD",
"id": "CVE-2014-8755",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2014-10-14T00:00:00",
"db": "ZDI",
"id": "ZDI-14-364",
"ident": null
},
{
"date": "2014-10-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-07344",
"ident": null
},
{
"date": "2014-12-16T00:00:00",
"db": "VULHUB",
"id": "VHN-76700",
"ident": null
},
{
"date": "2014-10-15T00:00:00",
"db": "BID",
"id": "70593",
"ident": null
},
{
"date": "2014-10-24T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-004962",
"ident": null
},
{
"date": "2014-10-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201410-597",
"ident": null
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2014-8755",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Panasonic Network Camera View WebVideoCam ActiveX Remote code execution vulnerability",
"sources": [
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2014-07344"
},
{
"db": "BID",
"id": "70593"
}
],
"trust": 1.1
},
"type": {
"_id": null,
"data": "Input validation",
"sources": [
{
"db": "IVD",
"id": "c4a09e04-2351-11e6-abef-000c29c66e3d"
},
{
"db": "CNNVD",
"id": "CNNVD-201410-597"
}
],
"trust": 0.8
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…