{"id": "CVE-2020-5589", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2020-06-09T08:15:11.233", "references": [{"url": "https://jvn.jp/en/jp/JVN67447798/", "tags": ["Third Party Advisory"], "source": "vultures@jpcert.or.jp"}, {"url": "https://www.sony.com/electronics/support/audio-video-headphones", "tags": ["Vendor Advisory"], "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-306"}]}, {"type": "Secondary", "source": "vultures@jpcert.or.jp", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product."}, {"lang": "es", "value": "SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N y WI-SP600N con versiones de firmware anteriores a la 4.5.2 tienen la vulnerabilidad de que alguien dentro del rango del Bluetooth pueda hacer el emparejamiento Bluetooth y operar como cambiar el volumen del producto"}], "lastModified": "2020-06-23T18:15:13.930", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wf-1000x_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59B00BC7-F68A-4168-85C1-E4A9CAB65CE4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wf-1000x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2DAE980A-3716-4C45-B242-F2D076CF91C9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wf-sp700n_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00AC572D-7391-4C10-B00B-ADCF38A3B63A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wf-sp700n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DEDC9280-A3FA-4C95-881C-3F4AE1646269"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wh-1000xm2_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32486452-AA5A-44F5-A6DA-A17E0797DD2B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wh-1000xm2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AC69C510-B00B-4A19-A2B0-088794DCB72C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wh-1000xm3_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55B258AF-C145-4F56-9959-BAA1F402BF7C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wh-1000xm3:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5FC11C50-8AFD-408B-9AE5-858F01D679A8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wh-ch700n_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FF81341-09C8-49A1-BC08-5B04E8DAFC12"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wh-ch700n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "618C0CEA-101E-485C-A4B8-EB7B2F6CC339"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wh-h900n_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1E9E8DF-BF2F-4386-A41C-4E71CB657BEE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wh-h900n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "55A2C69C-97D8-4EAA-AF69-919199E82B3D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wh-xb700_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B24A3B31-83E8-48EA-B837-F7571926DE9D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wh-xb700:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6CBEF934-DED7-46DE-B772-8FEAD37E2A07"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wh-xb900n_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0FB3A6C-8C95-450C-9ADD-82BC87AD8DB3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wh-xb900n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F120956A-9FA4-4FF0-936B-3F0460F9E0B5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wi-1000x_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFDC3BBC-E443-4F72-A7FF-74430842FA92"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wi-1000x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E98AAE84-1880-40EA-B25E-4B1427D5C1D4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wi-c600n_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B845E0C-235A-4FA8-94F9-FB8A89167092"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wi-c600n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E79F5077-A285-4A4A-ACE5-DE3B9BC94E74"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sony:wi-sp600n_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CBF2EF23-A43D-4728-8293-9C0CB579F2B0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:sony:wi-sp600n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C38877DA-7C20-4EB5-BEB3-3D68B6F36B0E"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "vultures@jpcert.or.jp"}
