PT-2008-3464 · Sony · Sony Mylo Com-2

Published 2008-04-24 · Updated 2017-08-08 · CVE-2008-1938

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sony Mylo COM-2 Japanese model firmware versions prior to 1.002

Description The issue concerns the improper verification of web server SSL certificates, allowing remote attackers to obtain sensitive information and conduct spoofing attacks.

Recommendations For Sony Mylo COM-2 Japanese model firmware versions prior to 1.002, update the firmware to version 1.002 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-1938

Affected Products

Sony Mylo Com-2

References · 9

• http://secunia.com/advisories/29928 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1938 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41971 · Note
• http://mylo.nccl.sony.co.jp/download/M-W002-001-02/index.html · Note
• http://vupen.com/english/advisories/2008/1349/references · Note
• http://esupport.sony.com/perl/news-item.pl?news_id=262&mdl=COM2 · Note
• http://securityfocus.com/bid/28905 · Note
• http://jvn.jp/jp/JVN%2376788395/index.html · Note
• http://mylo.nccl.sony.co.jp/hotnews/2008/04/01/index.html · Note