Vulnerabilities > Sony > High

DATE CVE VULNERABILITY TITLE RISK
2019-06-19 CVE-2018-16593 OS Command Injection vulnerability in Sony products
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.
low complexity
sony CWE-78
8.8
2019-05-14 CVE-2019-11336 Information Exposure Through Log Files vulnerability in Sony Photo Sharing Plus 6.5830
Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.
network
high complexity
sony CWE-532
8.1
2018-11-15 CVE-2018-0690 Unspecified vulnerability in Sony Music Center for PC 1.0.00/1.0.01/1.0.02
An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files.
network
high complexity
sony
7.5
2018-09-04 CVE-2018-0656 Untrusted Search Path vulnerability in Sony Digital Paper APP 1.4.0.16050
Untrusted search path vulnerability in The installer of Digital Paper App version 1.4.0.16050 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8
2018-08-14 CVE-2018-3937 OS Command Injection vulnerability in Sony products
An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00.
network
low complexity
sony CWE-78
7.2
2018-06-26 CVE-2018-0600 Untrusted Search Path vulnerability in Sony Playmemories Home 5.5.01
Untrusted search path vulnerability in the installer of PlayMemories Home for Windows ver.5.5.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8
2017-12-27 CVE-2017-17010 Untrusted Search Path vulnerability in Sony Content Manager Assistant 3.55.7671.0901
Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8
2017-12-22 CVE-2017-10909 Untrusted Search Path vulnerability in Sony Music Center 1.0.00/1.0.01
Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8
2017-12-01 CVE-2017-10892 Untrusted Search Path vulnerability in Sony Music Center 1.0.00
Untrusted search path vulnerability in Music Center for PC version 1.0.00 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8
2017-12-01 CVE-2017-10891 Untrusted Search Path vulnerability in Sony Media GO 3.2.0.191
Untrusted search path vulnerability in Media Go version 3.2.0.191 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-426
7.8