Security News > 2020 > December > PlayStation Now bugs let sites run malicious code on Windows PCs

PlayStation Now bugs let sites run malicious code on Windows PCs
2020-12-07 16:18

Security bugs found in the PlayStation Now cloud gaming Windows application allowed attackers to execute arbitrary code on Windows devices running vulnerable app versions.

PlayStation addressed the bug and tagged the bug report as 'Resolved' one month later, on June 25th, 2020.

After opening it in any web browser on their computer, malicious scripts on the website will connect to the local WebSocket server and ask AGL to load malicious Node code from another site and run it on the target's device.

Sony announced the launch of its public HackerOne PlayStation bug bounty program in June 2020, a program that pays security researchers and gamers for reporting security issues found in the PlayStation 4 and 5 systems, operating systems, accessories, and the PlayStation Network.

Qualified PlayStation bug submissions are eligible for bounty payouts ranging from $100 for a low severity PlayStation Network vulnerability up to $50,000 for a PlayStation 4 critical flaw.


News URL

https://www.bleepingcomputer.com/news/security/playstation-now-bugs-let-sites-run-malicious-code-on-windows-pcs/