CVE-2019-5982

Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed.

Score

CVSS 3.0 7.5 High

Status

Modified - vultures@jpcert.or.jp

Published

2019-07-05

Last modified

2024-08-04

Weaknesses

CWE-494

Affected products

• Vaio Update (Sony)
• Vaio Update (Sony Corporation)

References

• https://jvn.jp/en/jp/JVN13555032/index.html
• https://www.sony.com/electronics/support/articles/00228777