PT-2017-9381 · Sony · Pcs-Xg100+2

Published 2017-06-09 · Updated 2017-06-22 · CVE-2016-7830

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 Sony PCS-XC1 devices with firmware version prior to Ver.1.22

Description The issue allows an attacker on the same network segment to bypass authentication and perform administrative operations.

Recommendations For Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices, update the firmware to Ver.1.51 or later. For Sony PCS-XC1 devices, update the firmware to Ver.1.22 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2016-7830

Affected Products

Pcs-Xc1

Pcs-Xg100

Pcs-Xg77

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-7830 · Security Note
• https://sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-7830 · Vendor Advisory
• https://jvn.jp/en/jp/JVN42070907/index.html · Note