61
CVEs
6
Critical
37
High
0
KEV
16
PoC
34
Unpatched C/H
18.0%
Patch Rate
2.8%
Avg EPSS
Severity Breakdown
CRITICAL
6
HIGH
37
MEDIUM
13
LOW
5
Monthly CVE Trend
Affected Products (30)
Xav 9500Es
7
Xav Ax8500 Firmware
6
Bravia Signage
3
Wg C10 Firmware
3
Snc Eb600B Firmware
2
Music Center
2
Snc Eb630 Firmware
2
Snc Eb600 Firmware
2
Snc Em600 Firmware
2
Bravia Firmware
2
Xav Ax5500 Firmware
2
Snc Em602R Firmware
2
Playmemories Home
2
Xperia Xzs Firmware
2
Snc Em602Rc Firmware
2
Snc Em632R Firmware
2
Snc Em601 Firmware
2
Photo Sharing Plus
2
Snc Eb630B Firmware
2
Snc Em630 Firmware
2
Snc Cx600W Firmware
2
Snc Em632Rc Firmware
2
Vaio Update
2
Snc Eb632R Firmware
2
Snc Em631 Firmware
2
Snc Eb602R Firmware
2
Pcs Xc1 Firmware
1
Pcs Xg100 Firmware
1
Arrows Nx F05 F Firmware
1
Wf 1000X Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2012-0985 | Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 49.2%. | CRITICAL | 9.3 | 49.2% | 116 |
PoC
No patch
|
| CVE-2016-7834 | SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551,. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 39.5%. | HIGH | 8.8 | 39.5% | 103 |
PoC
|
| CVE-2012-2210 | The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN packets, as demonstrated by hping, a related issue to. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 24.1%. | HIGH | 7.8 | 24.1% | 83 |
PoC
No patch
|
| CVE-2020-36923 | Sony BRAVIA Digital Signage 1.7.8 has an IDOR vulnerability that allows attackers to access hidden system resources like /#/content-creation by bypassing client-side access restrictions. PoC available. | CRITICAL | 9.8 | 0.2% | 69 |
PoC
No patch
|
| CVE-2022-23747 | In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 10.0% | 69 |
PoC
No patch
|
| CVE-2019-11336 | Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available. | HIGH | 8.1 | 3.2% | 60 |
PoC
No patch
|
| CVE-2019-19364 | A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe (version 1.1.0.21) and CatalystBrowseSuite.2019.1.exe (version 1.1.0.21) installers run. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.8 | 0.5% | 59 |
PoC
No patch
|
| CVE-2020-36922 | Bravia Signage contains a vulnerability that allows attackers to access sensitive system details through API endpoints (CVSS 7.5). | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|
| CVE-2018-3937 | An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 7.2 | 9.6% | 56 |
PoC
No patch
|
| CVE-2013-3539 | Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available. | MEDIUM | 6.8 | 1.4% | 55 |
PoC
No patch
|
| CVE-2022-3349 | A vulnerability was found in Sony PS4 and PS5. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 6.8 | 0.5% | 54 |
PoC
No patch
|
| CVE-2024-23922 | Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available. | MEDIUM | 6.8 | 1.8% | 54 |
PoC
|
| CVE-2022-27094 | Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 6.7 | 0.4% | 54 |
PoC
No patch
|
| CVE-2020-36924 | Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter. [CVSS 6.1 MEDIUM] | MEDIUM | 6.1 | 0.1% | 51 |
PoC
No patch
|
| CVE-2018-3938 | An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available. | CRITICAL | 10.0 | 3.3% | 50 |
No patch
|