Lucene search

[email protected]CVE-2016-7830

HistoryJun 09, 2017 - 4:29 p.m.

CVE-2016-7830

2017-06-0916:29:01

CWE-306

[email protected]

web.nvd.nist.gov

sony

pcs-xg100

pcs-xg100s

pcs-xg100c

pcs-xg77

pcs-xg77s

pcs-xg77c

pcs-xc1

firmware

authentication bypass

cve-2016-7830

nvd

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.

Affected configurations

Vulners

NVD

Node

sony_corporationpcs-xg100Range<1.51

sony_corporationpcs-xg100sRange<1.51

sony_corporationpcs-xg100cRange<1.51

sony_corporationpcs-xg77Range<1.51

sony_corporationpcs-xg77sRange<1.51

sony_corporationpcs-xg77cRange<1.51

sony_corporationpcs-xc1Range<1.22

CPENameOperatorVersion
sony:pcs-xg100_firmwaresony pcs-xg100 firmwareeq1.50

CPE	Name	Operator	Version
sony:pcs-xg100_firmware	sony pcs-xg100 firmware	eq	1.50

CNA Affected

[
  {
    "product": "PCS-XG100",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to Ver.1.51"
      }
    ]
  },
  {
    "product": "PCS-XG100S",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to Ver.1.51"
      }
    ]
  },
  {
    "product": "PCS-XG100C",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to Ver.1.51"
      }
    ]
  },
  {
    "product": "PCS-XG77",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to Ver.1.51"
      }
    ]
  },
  {
    "product": "PCS-XG77S",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to Ver.1.51"
      }
    ]
  },
  {
    "product": "PCS-XG77C",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware versions prior to Ver.1.51"
      }
    ]
  },
  {
    "product": "PCS-XC1",
    "vendor": "Sony Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version prior to Ver.1.22"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN42070907/index.html

www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.2%

JSON

Related for CVE-2016-7830

jvn1 nvd1 cvelist1 prion1