CVE-2016-7830

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2017-06-09

Last modified

2024-08-06

Weaknesses

CWE-306

Affected products

• Pcs-xc1 Firmware (Sony)
• Pcs-xg100 Firmware (Sony)
• Pcs-xg77 Firmware (Sony)
• Pcs-xc1 (Sony Corporation)
• Pcs-xg100 (Sony Corporation)
• Pcs-xg100c (Sony Corporation)
• Pcs-xg100s (Sony Corporation)
• Pcs-xg77 (Sony Corporation)
• Pcs-xg77c (Sony Corporation)
• Pcs-xg77s (Sony Corporation)

References

• https://jvn.jp/en/jp/JVN42070907/index.html
• https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf