Read the docs
TI-2019-04287 Aliases CVE-2019-5997GHSA-fpx2-725v-hxc2

Code injection in Panasonic Video Insight VMS

Priority MEDIUM 45CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-94.

Summary

Video Insight VMS versions prior to 7.6.1 allow remote attackers to conduct code injection attacks via unspecified vectors.

Why it matters now

EPSS 0.01703 77th percentileScored 2026-11-07
Fix Fixed Video Insight VMS (Panasonic Corporation): 7.6.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
PanasonicVideo Insight VMSbefore 7.6.17.6.1Patch availableCNA
  • Video Insight VMS VendorPanasonic Affected before 7.6.1 Fixed in 7.6.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:panasonic:video_insight_vms:*:*:*:*:*:*:*:*up to 7.5VulnerablePanasonic
  • cpe:2.3:a:panasonic:video_insight_vms:*:*:*:*:*:*:*:* Versions up to 7.5 Vulnerable ·Panasonic

Remediation

  • Fix · CNA Video Insight VMS (Panasonic Corporation) Fixed in 7.6.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5997
  2. 2026-10-03 Alias added: GHSA-fpx2-725v-hxc2

References

Advisory 1

Other 1

  • TI-2021-03850 Cleartext transmission of sensitive information in Panasonic Video Insight VMS CVSS 3.1CRITICAL 9.8
  • TI-2019-04286 SQL injection in Video Insight VMS 7.3.2.5 and earlier CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences