PatchSiren

PatchSiren cyber security CVE debrief

CVE-2017-5151 Panasonic CVE debrief

CVE-2017-5151 affects Panasonic Video Insight Web Client versions 6.3.5.11 and earlier. NVD classifies the issue as SQL injection (CWE-89) and assigns a high-severity CVSS 3.1 score of 7.3. Because the flaw is network-exploitable without user interaction or privileges, organizations using the affected client should treat it as a priority exposure and follow the linked advisory guidance.

Vendor
Panasonic
Product
CVE-2017-5151
CVSS
HIGH 7.3
CISA KEV
Not listed in stored evidence
Original CVE published
2017-02-13
Original CVE updated
2026-05-13
Advisory published
2017-02-13
Advisory updated
2026-05-13

Who should care

Security and operations teams running Panasonic Video Insight Web Client, especially any deployment at version 6.3.5.11 or earlier. Administrators responsible for internet-facing or broadly reachable management interfaces should prioritize review first.

Technical summary

NVD records this as a SQL injection vulnerability in the Panasonic Video Insight Web Client CPE range ending at version 6.3.5.11. The CVSS vector is AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating a remotely reachable issue requiring no privileges or user interaction. The published description says the flaw may allow remote code execution, and NVD maps it to CWE-89.

Defensive priority

High

Recommended defensive actions

  • Identify any Panasonic Video Insight Web Client installations and confirm whether they are at version 6.3.5.11 or earlier.
  • Review and apply the vendor/advisory guidance linked from the official NVD and US-CERT references.
  • Restrict access to affected management interfaces until remediation is complete, using network controls and segmentation.
  • Increase monitoring for unexpected database activity, application errors, and anomalous authentication or command execution behavior.
  • If patching is not immediately possible, document the exposure and implement compensating controls until the affected version is removed or updated.

Evidence notes

The CVE was published on 2017-02-13 and the supplied NVD record was last modified on 2026-05-13. NVD’s vulnerable CPE criteria identify panasonic:video_insight_web_client versions through 6.3.5.11. The record references a US-CERT advisory (ICSA-17-012-02) and SecurityFocus BID 95416. The provided enrichment marks this as not listed in KEV.

Official resources

Publicly disclosed in the CVE/NVD record on 2017-02-13. No KEV listing was provided in the supplied enrichment, and the NVD record shows a later metadata modification on 2026-05-13.