PatchSiren

PatchSiren cyber security CVE debrief

CVE-2017-5151 Panasonic CVE debrief

CVE-2017-5151 affects Panasonic Video Insight Web Client versions 6.3.5.11 and earlier. NVD classifies the issue as SQL injection (CWE-89) and assigns a high-severity CVSS 3.1 score of 7.3. Because the flaw is network-exploitable without user interaction or privileges, organizations using the affected client should treat it as a priority exposure and follow the linked advisory guidance.

Vendor
Panasonic
Product
Video Insight Web Client
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2017-01-12
Original CVE updated
2017-01-12
Advisory published
2017-01-12
Advisory updated
2017-01-12

Who should care

Security and operations teams running Panasonic Video Insight Web Client, especially any deployment at version 6.3.5.11 or earlier. Administrators responsible for internet-facing or broadly reachable management interfaces should prioritize review first.

Technical summary

NVD records this as a SQL injection vulnerability in the Panasonic Video Insight Web Client CPE range ending at version 6.3.5.11. The CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating a remotely reachable issue requiring no privileges or user interaction. The published description says the flaw may allow remote code execution, and NVD maps it to CWE-89.

Defensive priority

High

Recommended defensive actions

  • Identify any Panasonic Video Insight Web Client installations and confirm whether they are at version 6.3.5.11 or earlier.
  • Review and apply the vendor/advisory guidance linked from the official NVD and US-CERT references.
  • Restrict access to affected management interfaces until remediation is complete, using network controls and segmentation.
  • Increase monitoring for unexpected database activity, application errors, and anomalous authentication or command execution behavior.
  • If patching is not immediately possible, document the exposure and implement compensating controls until the affected version is removed or updated.

Evidence notes

The CVE was published on 2017-02-13 and the supplied NVD record was last modified on 2026-05-13. NVD’s vulnerable CPE criteria identify panasonic:video_insight_web_client versions through 6.3.5.11. The record references a US-CERT advisory (ICSA-17-012-02) and SecurityFocus BID 95416. The provided enrichment marks this as not listed in KEV.

Sources and references

Verified primary and authoritative sources

  • CVE-2017-5151 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2017-5151

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2017-5151 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2017-5151

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.