8.8

CVE-2016-7830

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sony ≫ Pcs-xg100 Firmware Version 1.50
   Sony ≫ Pcs-xg100 Version -
   Sony ≫ Pcs-xg100s Version -
Sony ≫ Pcs-xg100 Firmware Version 1.42
   Sony ≫ Pcs-xg100c Version -
Sony ≫ Pcs-xg77 Firmware Version 1.50
   Sony ≫ Pcs-xg77 Version -
   Sony ≫ Pcs-xg77s Version -
Sony ≫ Pcs-xg77 Firmware Version 1.42
   Sony ≫ Pcs-xg77c Version -
Sony ≫ Pcs-xc1 Firmware Version <= 1.21
   Sony ≫ Pcs-xc1 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.73% 0.495
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://jvn.jp/en/jp/JVN42070907/index.html
Third Party Advisory
VDB Entry
https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf
Vendor Advisory