8.8

CVE-2016-7830

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sony ≫ Pcs-xg100 Firmware Version1.50
   Sony ≫ Pcs-xg100 Version-
   Sony ≫ Pcs-xg100s Version-
Sony ≫ Pcs-xg100 Firmware Version1.42
   Sony ≫ Pcs-xg100c Version-
Sony ≫ Pcs-xg77 Firmware Version1.50
   Sony ≫ Pcs-xg77 Version-
   Sony ≫ Pcs-xg77s Version-
Sony ≫ Pcs-xg77 Firmware Version1.42
   Sony ≫ Pcs-xg77c Version-
Sony ≫ Pcs-xc1 Firmware Version <= 1.21
   Sony ≫ Pcs-xc1 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.615
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 5.8 6.5 6.4
AV:A/AC:L/Au:N/C:P/I:P/A:P
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://jvn.jp/en/jp/JVN42070907/index.html
Third Party Advisory
VDB Entry