PT-2017-9381 · Sony · Pcs-Xg100+2

Publicado 2017-06-09 · Atualizado 2017-06-22 · CVE-2016-7830

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 Sony PCS-XC1 devices with firmware version prior to Ver.1.22

Description The issue allows an attacker on the same network segment to bypass authentication and perform administrative operations.

Recommendations For Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices, update the firmware to Ver.1.51 or later. For Sony PCS-XC1 devices, update the firmware to Ver.1.22 or later.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2016-7830

Produtos afetados

Pcs-Xc1

Pcs-Xg100

Pcs-Xg77

Referências · 4

• https://jvn.jp/en/jp/JVN42070907/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7830 · Nota de Segurança
• https://sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-7830 · Aviso do Fabricante