PT-2022-18218 · Sony · Sony Playmemories Home

Published 2022-05-20 · Updated 2022-05-26 · CVE-2022-27094

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sony PlayMemories Home version 6.0

Description The issue allows attackers to escalate privileges to the system level due to an unquoted service path.

Recommendations For Sony PlayMemories Home version 6.0, update to a version that quotes the service path to prevent privilege escalation.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-27094

Affected Products

Sony Playmemories Home

References · 4

• 🔥 https://exploit-db.com/exploits/50817 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-27094 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27094 · Vendor Advisory
• https://t.me/cibsecurity/43043 · Telegram Post