PT-2008-3464 · Sony · Sony Mylo Com-2

Publicado 2008-04-24 · Atualizado 2017-08-08 · CVE-2008-1938

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sony Mylo COM-2 Japanese model firmware versions prior to 1.002

Description The issue concerns the improper verification of web server SSL certificates, allowing remote attackers to obtain sensitive information and conduct spoofing attacks.

Recommendations For Sony Mylo COM-2 Japanese model firmware versions prior to 1.002, update the firmware to version 1.002 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-1938

Produtos afetados

Sony Mylo Com-2

Referências · 9

• https://exchange.xforce.ibmcloud.com/vulnerabilities/41971 · Nota
• http://mylo.nccl.sony.co.jp/download/M-W002-001-02/index.html · Nota
• http://vupen.com/english/advisories/2008/1349/references · Nota
• http://secunia.com/advisories/29928 · Aviso do Fabricante
• http://esupport.sony.com/perl/news-item.pl?news_id=262&mdl=COM2 · Nota
• http://securityfocus.com/bid/28905 · Nota
• http://jvn.jp/jp/JVN%2376788395/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1938 · Nota de Segurança
• http://mylo.nccl.sony.co.jp/hotnews/2008/04/01/index.html · Nota