sony Archives - CVE Vulnerability

CVE-2019-15743

Sun, 26 Feb 2023 06:31:03 +0000

The Sony Xperia Touch Android device with a build fingerprint of Sony/blanc_windy/blanc_windy:7.0/LOIRE-SMART-BLANC-1.0.0-170530-0834/1:user/dev-keys contains a pre-installed app with a package name of com.sonymobile.android.maintenancetool.testmic app (versionCode=24, versionName=7.0) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record audio to external storage.

The post CVE-2019-15743 appeared first on CVE Vulnerability.

CVE-2019-15744

Sun, 26 Feb 2023 06:31:03 +0000

The Sony Xperia Xperia XZs Android device with a build fingerprint of Sony/keyaki_softbank/keyaki_softbank:7.1.1/TONE3-3.0.0-SOFTBANK-170517-0323/1:user/dev-keys contains a pre-installed app with a package name of jp.softbank.mb.tdrl app (versionCode=1413005, versionName=1.3.0) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.

The post CVE-2019-15744 appeared first on CVE Vulnerability.

CVE-2019-15416

Sun, 26 Feb 2023 06:30:55 +0000

The Sony keyaki_kddi Android device with a build fingerprint of Sony/keyaki_kddi/keyaki_kddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys contains a pre-installed app with a package name of com.kddi.android.packageinstaller app (versionCode=70008, versionName=08.10.03) that allows other pre-installed apps to perform app installation via an accessible app component. This capability can be accessed by any pre-installed app on the device which can obtain signatureOrSystem permissions that are required by other other pre-installed apps that exported their capabilities to other pre-installed app.

The post CVE-2019-15416 appeared first on CVE Vulnerability.

CVE-2019-12762

Sun, 26 Feb 2023 06:30:00 +0000

Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop table, aka Ghost Touch.

The post CVE-2019-12762 appeared first on CVE Vulnerability.

CVE-2019-11889

Sun, 26 Feb 2023 06:29:42 +0000

Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV.

The post CVE-2019-11889 appeared first on CVE Vulnerability.

CVE-2019-11890

Sun, 26 Feb 2023 06:29:42 +0000

Sony Bravia Smart TV devices allow remote attackers to cause a denial of service (device hang or reboot) via a SYN flood attack over a wired or Wi-Fi LAN.

The post CVE-2019-11890 appeared first on CVE Vulnerability.

CVE-2019-11336

Sun, 26 Feb 2023 06:29:29 +0000

Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.

The post CVE-2019-11336 appeared first on CVE Vulnerability.

CVE-2019-10886

Sun, 26 Feb 2023 06:29:20 +0000

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network.

The post CVE-2019-10886 appeared first on CVE Vulnerability.