Sony vulnerabilities
81 vulnerabilities
Known vulnerabilities in Sony products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 116 products.
Products
50 of 116- XAV 9500Es7 vulnerabilities
- Xav Ax85006 vulnerabilities
- Xav Ax55004 vulnerabilities
- Bravia Signage3 vulnerabilities
- Playstation Portable3 vulnerabilities
- R5C3 vulnerabilities
- Wd653 vulnerabilities
- Wd753 vulnerabilities
- We63 vulnerabilities
- We753 vulnerabilities
- Wf63 vulnerabilities
- Wg C103 vulnerabilities
- Xe703 vulnerabilities
- Xf703 vulnerabilities
- Bravia2 vulnerabilities
- Music Center2 vulnerabilities
- Photo Sharing Plus2 vulnerabilities
- Playmemories Home2 vulnerabilities
- PS42 vulnerabilities
- Snc Eb6002 vulnerabilities
- Snc Eb600B2 vulnerabilities
- Snc Eb602R2 vulnerabilities
- Snc Eb6302 vulnerabilities
- Snc Eb630B2 vulnerabilities
- Snc Eb632R2 vulnerabilities
- Snc Em6002 vulnerabilities
- Snc Em6012 vulnerabilities
- Snc Em602R2 vulnerabilities
- Snc Em602Rc2 vulnerabilities
- Snc Em6302 vulnerabilities
- Snc Em6312 vulnerabilities
- Snc Em632R2 vulnerabilities
- Snc Em632Rc2 vulnerabilities
- Vaio Media Server2 vulnerabilities
- Vaio Update2 vulnerabilities
- Xperia Xzs2 vulnerabilities
- Audio Usb Driver1 vulnerabilities
- Axruploadserver Activex Control1 vulnerabilities
- Bravia Tv1 vulnerabilities
- Catalyst Browse1 vulnerabilities
- Catalyst Production Suite1 vulnerabilities
- Content Manager Assistant1 vulnerabilities
- Content Transfer1 vulnerabilities
- Digital Paper App1 vulnerabilities
- Dvd Architect Pro1 vulnerabilities
- Dvd Architect Studio1 vulnerabilities
- Hap Music Transfer1 vulnerabilities
- Media Go1 vulnerabilities
- Moviez Hd1 vulnerabilities
- Music Center For Pc1 vulnerabilities
CVE-2018-16595sonyr5c_firmware+7
EPSS score0.60%
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices has a Buffer Overflow.CVE-2018-16593sonyr5c_firmware+7EPSS score0.91%
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.CVE-2018-16594sonyr5c_firmware+7EPSS score0.89%
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.CVE-2018-0600sony corporationthe installer of playmemories home for windows+1EPSS score1.03%
Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0690sony video & sound products inc.music center for pc+1EPSS score1.53%
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files.CVE-2018-0656sony corporationthe installer of digital paper app+1EPSS score1.28%
Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-14983sonyxperia_l1_firmwareEPSS score0.36%
The Sony Xperia L1 Android device with a build fingerprint of Sony/G3313/G3313:7.0/43.0.A.6.49/2867558199:user/release-keys contains the android framework (i.e., system_server) with a package name of android (versionCode=24, versionName=7.0) that has been modified by Sony or another entity in the supply chain. The system_server process in the core android package has an exported broadcast receiver that allows any app co-located on the device to programmatically initiate the taking of a screenshot and have the resulting screenshot be written to external storage. The taking of a screenshot is not transparent to the user; the device has a screen animation as the screenshot is taken and there is a notification indicating that a screenshot occurred. If the attacking app also requests the EXPAND_STATUS_BAR permission, it can wake the device up using certain techniques and expand the status bar to take a screenshot of the user's notifications even if the device has an active screen lock. The notifications may contain sensitive data such as text messages used in two-factor authentication. The system_server process that provides this capability cannot be disabled, as it is part of the Android framework. The notification can be removed by a local Denial of Service (DoS) attack to reboot the device.CVE-2018-3937sonysnc-eb600_firmware+14EPSS score9.62%
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GET request can cause arbitrary commands to be executed. An attacker can send an HTTP request to trigger this vulnerability.CVE-2018-3938sonysnc-eb600_firmware+14EPSS score3.30%
An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00. A specially crafted POST can cause a stack-based buffer overflow, resulting in remote code execution. An attacker can send a malicious POST request to trigger this vulnerability.CVE-2013-3539ovislinkairlive_wl2600cam+10EPSS score8.76%
Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera models allows remote attackers to hijack the authentication of administrators for requests that add users.CVE-2021-20793sony corporationthe installers of multiple sony products+2EPSS score0.32%
Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.CVE-2021-38544sonysrs-xb33_firmware+1EPSS score1.29%
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a device's power indicator LED is correlative to the power consumption. The sound played by the speakers affects their power consumption and as a result is also correlative to the light intensity of the LEDs. By analyzing measurements obtained from an electro-optical sensor directed at the power indicator LEDs of the speakers, we can recover the sound played by them.CVE-2007-1728sonyplaystation_3+1EPSS score1.61%
The Remote Play feature in Sony Playstation 3 (PS3) 1.60 and Playstation Portable (PSP) 3.10 OE-A allows remote attackers to cause a denial of service via a flood of UDP packets.CVE-2007-5709sonysonicstage_connect_playerEPSS score10.92%
Stack-based buffer overflow in Sony SonicStage CONNECT Player (CP) 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file.CVE-2007-3488sonysony_network_camera_snc-p5EPSS score16.19%
Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and SNC-RX570N/W, SNC-RX570N/B, SNC-RX550N/W, SNC-RX550N/B, SNC-RX530N/W, and SNC-RX530N/B 3.00 and 2.x before 2.31; allows remote attackers to execute arbitrary code via a long first argument to the PrmSetNetworkParam method.CVE-2016-7834sonysnc_series_firmwareEPSS score3.87%
SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device.CVE-2016-7830sony corporationpcs-xc1+9EPSS score0.73%
Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.CVE-2025-62497sony corporationsnc-cx600w+1EPSS score0.11%
Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0. If a user accesses a specially crafted webpage while logged in, unintended operations may be performed.CVE-2025-5475sonyxav-ax8500_firmwareEPSS score0.34%
Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.
The specific flaw exists within the handling of Bluetooth packets. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the elysian-bt-service process. Was ZDI-CAN-26283.CVE-2025-5479sonyxav-ax8500_firmwareEPSS score0.38%
Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.
The specific flaw exists within the implementation of the Bluetooth AVCTP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-26290.