What’s Vulnerable › Vulnerabilities

CVE-2014-9596

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-01-15 · updated 2026-06-17
• Weakness: CWE-310

Description

Panasonic Arbitrator Back-End Server (BES) MK 2.0 VPU before 9.3.1 build 4.08.003.0, when USB Wi-Fi or Direct LAN is enabled, and MK 3.0 VPU before 9.3.1 build 5.06.000.0, when Embedded Wi-Fi or Direct LAN is enabled, does not use encryption, which allows remote attackers to obtain sensitive information by sniffing the network for client-server traffic, as demonstrated by Active Directory credential information.

Affected products

• Panasonic Arbitrator Back-End Server Mk 2.0 Vpu: all versions
• Panasonic Arbitrator Back-End Server Mk 2.0 Vpu Firmware: through 9.3.1
• Panasonic Arbitrator Back-End Server Mk 3.0 Vpu: all versions
• Panasonic Arbitrator Back-End Server Mk 3.0 Vpu Firmware: through 9.3.1

References

• http://us2.campaign-archive1.com/?u=8c9cff2e712e3b7d09a07ecef&id=21f059b3ab
• http://www.kb.cert.org/vuls/id/117604
• http://us2.campaign-archive1.com/?u=8c9cff2e712e3b7d09a07ecef&id=21f059b3ab
• http://www.kb.cert.org/vuls/id/117604

Get alerted when CVE-2014-9596 or the next vulnerability affects your stack