Search
Find a vulnerability
Search criteria
3 vulnerabilities found for SNC-RZ25N by Sony
CVE-2025-5124 (GCVE-0-2025-5124)
Vulnerability from nvd – Published: 2025-05-24 13:00 – Updated: 2025-05-28 17:40 Disputed
VLAI
EPSS
VEX
Title
Sony SNC-M1 Administrative Interface default credentials
Summary
A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they "have published the 'Hardening Guide' on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords".
Severity
8.1 (High)
8.1 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-05-27 14:23 UTC
CWE
- CWE-1392 - Use of Default Credentials
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.310203 | vdb-entry |
| https://vuldb.com/?ctiid.310203 | signaturepermissions-required |
| https://vuldb.com/?submit.564839 | third-party-advisory |
| https://github.com/zeke2997/CVE_request_Sony | related |
| https://github.com/zeke2997/CVE_request_Sony#3-poc | exploit |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Sony | SNC-M1 |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-M3 |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-RZ25N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-RZ30N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-DS10 |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-CS3N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-RX570N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-5124",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-27T14:23:36.848121Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-28T17:40:32.611Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/zeke2997/CVE_request_Sony"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Administrative Interface"
],
"product": "SNC-M1",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-M3",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-RZ25N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-RZ30N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-DS10",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-CS3N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-RX570N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "zeke (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they \"have published the \u0027Hardening Guide\u0027 on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords\"."
},
{
"lang": "de",
"value": "Es wurde eine Schwachstelle in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N bis 1.30 entdeckt. Sie wurde als kritisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Komponente Administrative Interface. Durch die Manipulation mit unbekannten Daten kann eine use of default credentials-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Sie ist schwierig auszunutzen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung. Die wahre Existenz der vermeintlichen Schwachstelle wird zur Zeit in Frage gestellt. Als bestm\u00f6gliche Massnahme werden Anpassungen an der Konfiguration empfohlen."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.6,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1392",
"description": "Use of Default Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-24T13:00:14.671Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-310203 | Sony SNC-M1 Administrative Interface default credentials",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.310203"
},
{
"name": "VDB-310203 | CTI Indicators (IOB, IOC)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.310203"
},
{
"name": "Submit #564839 | sony Network Camera SNC \u003c=1.30 Use of Default Credentials",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.564839"
},
{
"tags": [
"related"
],
"url": "https://github.com/zeke2997/CVE_request_Sony"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/zeke2997/CVE_request_Sony#3-poc"
}
],
"tags": [
"disputed"
],
"timeline": [
{
"lang": "en",
"time": "2025-05-23T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-05-23T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-05-23T20:03:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "Sony SNC-M1 Administrative Interface default credentials"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-5124",
"datePublished": "2025-05-24T13:00:14.671Z",
"dateReserved": "2025-05-23T17:58:19.738Z",
"dateUpdated": "2025-05-28T17:40:32.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-5124 (GCVE-0-2025-5124)
Vulnerability from cvelistv5 – Published: 2025-05-24 13:00 – Updated: 2025-05-28 17:40 Disputed
VLAI
EPSS
VEX
Title
Sony SNC-M1 Administrative Interface default credentials
Summary
A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they "have published the 'Hardening Guide' on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords".
Severity
8.1 (High)
8.1 (High)
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-05-27 14:23 UTC
CWE
- CWE-1392 - Use of Default Credentials
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.310203 | vdb-entry |
| https://vuldb.com/?ctiid.310203 | signaturepermissions-required |
| https://vuldb.com/?submit.564839 | third-party-advisory |
| https://github.com/zeke2997/CVE_request_Sony | related |
| https://github.com/zeke2997/CVE_request_Sony#3-poc | exploit |
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Sony | SNC-M1 |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-M3 |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-RZ25N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-RZ30N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-DS10 |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-CS3N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
|
| Sony | SNC-RX570N |
Affected:
1.0
Affected: 1.1 Affected: 1.2 Affected: 1.3 Affected: 1.4 Affected: 1.5 Affected: 1.6 Affected: 1.7 Affected: 1.8 Affected: 1.9 Affected: 1.10 Affected: 1.11 Affected: 1.12 Affected: 1.13 Affected: 1.14 Affected: 1.15 Affected: 1.16 Affected: 1.17 Affected: 1.18 Affected: 1.19 Affected: 1.20 Affected: 1.21 Affected: 1.22 Affected: 1.23 Affected: 1.24 Affected: 1.25 Affected: 1.26 Affected: 1.27 Affected: 1.28 Affected: 1.29 Affected: 1.30 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-5124",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-27T14:23:36.848121Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-28T17:40:32.611Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://github.com/zeke2997/CVE_request_Sony"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"Administrative Interface"
],
"product": "SNC-M1",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-M3",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-RZ25N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-RZ30N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-DS10",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-CS3N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
},
{
"modules": [
"Administrative Interface"
],
"product": "SNC-RX570N",
"vendor": "Sony",
"versions": [
{
"status": "affected",
"version": "1.0"
},
{
"status": "affected",
"version": "1.1"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.3"
},
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.6"
},
{
"status": "affected",
"version": "1.7"
},
{
"status": "affected",
"version": "1.8"
},
{
"status": "affected",
"version": "1.9"
},
{
"status": "affected",
"version": "1.10"
},
{
"status": "affected",
"version": "1.11"
},
{
"status": "affected",
"version": "1.12"
},
{
"status": "affected",
"version": "1.13"
},
{
"status": "affected",
"version": "1.14"
},
{
"status": "affected",
"version": "1.15"
},
{
"status": "affected",
"version": "1.16"
},
{
"status": "affected",
"version": "1.17"
},
{
"status": "affected",
"version": "1.18"
},
{
"status": "affected",
"version": "1.19"
},
{
"status": "affected",
"version": "1.20"
},
{
"status": "affected",
"version": "1.21"
},
{
"status": "affected",
"version": "1.22"
},
{
"status": "affected",
"version": "1.23"
},
{
"status": "affected",
"version": "1.24"
},
{
"status": "affected",
"version": "1.25"
},
{
"status": "affected",
"version": "1.26"
},
{
"status": "affected",
"version": "1.27"
},
{
"status": "affected",
"version": "1.28"
},
{
"status": "affected",
"version": "1.29"
},
{
"status": "affected",
"version": "1.30"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "zeke (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30. This affects an unknown part of the component Administrative Interface. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. It is recommended to change the configuration settings. The vendor was contacted early about this issue. They confirmed the existence but pointed out that they \"have published the \u0027Hardening Guide\u0027 on the Web from July 2018 to January 2025 and have thoroughly informed customers of the recommendation to change their initial passwords\"."
},
{
"lang": "de",
"value": "Es wurde eine Schwachstelle in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N bis 1.30 entdeckt. Sie wurde als kritisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Komponente Administrative Interface. Durch die Manipulation mit unbekannten Daten kann eine use of default credentials-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei \u00fcber das Netzwerk erfolgen. Die Komplexit\u00e4t eines Angriffs ist eher hoch. Sie ist schwierig auszunutzen. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung. Die wahre Existenz der vermeintlichen Schwachstelle wird zur Zeit in Frage gestellt. Als bestm\u00f6gliche Massnahme werden Anpassungen an der Konfiguration empfohlen."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 7.6,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1392",
"description": "Use of Default Credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-24T13:00:14.671Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-310203 | Sony SNC-M1 Administrative Interface default credentials",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/?id.310203"
},
{
"name": "VDB-310203 | CTI Indicators (IOB, IOC)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.310203"
},
{
"name": "Submit #564839 | sony Network Camera SNC \u003c=1.30 Use of Default Credentials",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.564839"
},
{
"tags": [
"related"
],
"url": "https://github.com/zeke2997/CVE_request_Sony"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/zeke2997/CVE_request_Sony#3-poc"
}
],
"tags": [
"disputed"
],
"timeline": [
{
"lang": "en",
"time": "2025-05-23T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2025-05-23T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2025-05-23T20:03:24.000Z",
"value": "VulDB entry last update"
}
],
"title": "Sony SNC-M1 Administrative Interface default credentials"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2025-5124",
"datePublished": "2025-05-24T13:00:14.671Z",
"dateReserved": "2025-05-23T17:58:19.738Z",
"dateUpdated": "2025-05-28T17:40:32.611Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
VAR-200706-0390
Vulnerability from variot - Updated: 2025-04-10 22:22Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and SNC-RX570N/W, SNC-RX570N/B, SNC-RX550N/W, SNC-RX550N/B, SNC-RX530N/W, and SNC-RX530N/B 3.00 and 2.x before 2.31; allows remote attackers to execute arbitrary code via a long first argument to the PrmSetNetworkParam method. The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. Failed exploit attempts likely result in denial-of-service conditions. ----------------------------------------------------------------------
Did you know? Our assessment and impact rating along with detailed information such as exploit code availability, or if an updated patch is released by the vendor, is not part of this mailing-list?
Click here to learn more about our commercial solutions: http://secunia.com/advisories/business_solutions/
Click here to trial our solutions: http://secunia.com/advisories/try_vi/
TITLE: Sony Network Camera ActiveX Control Buffer Overflow Vulnerability
SECUNIA ADVISORY ID: SA33968
VERIFY ADVISORY: http://secunia.com/advisories/33968/
DESCRIPTION: A vulnerability has been reported in the Sony Network Camera ActiveX control, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an unspecified error and can be exploited to cause a buffer overflow.
Successful exploitation may allow execution of arbitrary code.
Please see vendor advisory for a list of products and firmware versions that include the affected ActiveX control.
SOLUTION: Update to a fixed version. See vendor advisory for more details.
PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.
ORIGINAL ADVISORY: Sony: http://www.sony.jp/professional/News/info/pb20090223.html
OTHER REFERENCES: JVN: http://jvn.jp/jp/JVN16767117/index.html
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200706-0390",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "network camera snc-p5",
"scope": "eq",
"trust": 2.2,
"vendor": "sony",
"version": "1.0"
},
{
"model": "snc-cs10",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.06"
},
{
"model": "snc-cs11",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.06"
},
{
"model": "snc-cs50n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 2.22"
},
{
"model": "snc-cs50p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 2.22"
},
{
"model": "snc-df40n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.18"
},
{
"model": "snc-df40p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.18"
},
{
"model": "snc-df50n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.12"
},
{
"model": "snc-df50p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.12"
},
{
"model": "snc-df70n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.18"
},
{
"model": "snc-df70p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.18"
},
{
"model": "snc-df80n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.12"
},
{
"model": "snc-df80p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.12"
},
{
"model": "snc-df85n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.12"
},
{
"model": "snc-df85p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.12"
},
{
"model": "snc-p1",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.29"
},
{
"model": "snc-p5",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.29"
},
{
"model": "snc-rx530n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "(b) 3.00 or prior to 2.31"
},
{
"model": "snc-rx530n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "(w) 3.00 or prior to 2.31"
},
{
"model": "snc-rx530p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "3.00 or prior to 2.31"
},
{
"model": "snc-rx550n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "(b) 3.00 or prior to 2.31"
},
{
"model": "snc-rx550n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "(w) 3.00 or prior to 2.31"
},
{
"model": "snc-rx550p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "3.00 or prior to 2.31"
},
{
"model": "snc-rx570n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "(b) 3.00 or prior to 2.31"
},
{
"model": "snc-rx570n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "(w) 3.00 or prior to 2.31"
},
{
"model": "snc-rx570p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "3.00 or prior to 2.31"
},
{
"model": "snc-rz25n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.30"
},
{
"model": "snc-rz25p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 1.30"
},
{
"model": "snc-rz50n",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 2.22"
},
{
"model": "snc-rz50p",
"scope": "eq",
"trust": 0.8,
"vendor": "sony",
"version": "prior to 2.22"
},
{
"model": "network camera snc-rz50n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.21"
},
{
"model": "network camera snc-rz25n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.29"
},
{
"model": "network camera snc-rx570n/w",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "3.0"
},
{
"model": "network camera snc-rx570n/w",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.30"
},
{
"model": "network camera snc-rx570n/b",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "3.0"
},
{
"model": "network camera snc-rx570n/b",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.30"
},
{
"model": "network camera snc-rx550n/w",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "3.0"
},
{
"model": "network camera snc-rx550n/w",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.30"
},
{
"model": "network camera snc-rx550n/b",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "3.0"
},
{
"model": "network camera snc-rx550n/b",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.30"
},
{
"model": "network camera snc-rx530n/w",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "3.0"
},
{
"model": "network camera snc-rx530n/w",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.30"
},
{
"model": "network camera snc-rx530n/b",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "3.0"
},
{
"model": "network camera snc-rx530n/b",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.30"
},
{
"model": "network camera snc-p5",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.28"
},
{
"model": "network camera snc-p1",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.28"
},
{
"model": "network camera snc-df85n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.11"
},
{
"model": "network camera snc-df80n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.11"
},
{
"model": "network camera snc-df70n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.17"
},
{
"model": "network camera snc-df50n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.11"
},
{
"model": "network camera snc-df40n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.17"
},
{
"model": "network camera snc-cs50n",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "2.21"
},
{
"model": "network camera snc-cs11",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.05"
},
{
"model": "network camera snc-cs10",
"scope": "eq",
"trust": 0.3,
"vendor": "sony",
"version": "1.05"
},
{
"model": "network camera snc-rz50n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.22"
},
{
"model": "network camera snc-rz25n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.30"
},
{
"model": "network camera snc-rx570n/w",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "3.01"
},
{
"model": "network camera snc-rx570n/w",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.31"
},
{
"model": "network camera snc-rx570n/b",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "3.01"
},
{
"model": "network camera snc-rx570n/b",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.31"
},
{
"model": "network camera snc-rx550n/w",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "3.01"
},
{
"model": "network camera snc-rx550n/w",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.31"
},
{
"model": "network camera snc-rx550n/b",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "3.01"
},
{
"model": "network camera snc-rx550n/b",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.31"
},
{
"model": "network camera snc-rx530n/w",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "3.01"
},
{
"model": "network camera snc-rx530n/w",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.31"
},
{
"model": "network camera snc-rx530n/b",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "3.01"
},
{
"model": "network camera snc-rx530n/b",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.31"
},
{
"model": "network camera snc-p5",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.29"
},
{
"model": "network camera snc-p1",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.29"
},
{
"model": "network camera snc-df85n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.12"
},
{
"model": "network camera snc-df80n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.12"
},
{
"model": "network camera snc-df70n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.18"
},
{
"model": "network camera snc-df50n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.12"
},
{
"model": "network camera snc-df40n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.18"
},
{
"model": "network camera snc-cs50n",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "2.22"
},
{
"model": "network camera snc-cs11",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.06"
},
{
"model": "network camera snc-cs10",
"scope": "ne",
"trust": 0.3,
"vendor": "sony",
"version": "1.06"
}
],
"sources": [
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-cs10",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-cs11",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-cs50n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-cs50p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df40n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df40p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df50n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df50p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df70n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df70p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df80n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df80p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df85n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-df85p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-p1",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-p5",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rx530n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rx530p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rx550n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rx550p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rx570n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rx570p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rz25n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rz25p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rz50n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:sony:sony_network_camera_snc-rz50p",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "str0ke is credited with the discovery of this issue.",
"sources": [
{
"db": "BID",
"id": "24684"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
}
],
"trust": 0.9
},
"cve": "CVE-2007-3488",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2007-3488",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "Partial",
"baseScore": 6.8,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2009-000012",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-26850",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2007-3488",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "IPA",
"id": "JVNDB-2009-000012",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-200706-528",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-26850",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-26850"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS10 and SNC-CS11 before 1.06; SNC-DF40N and SNC-DF70N before 1.18; SNC-RZ50N and SNC-CS50N before 2.22; SNC-DF85N, SNC-DF80N, and SNC-DF50N before 1.12; and SNC-RX570N/W, SNC-RX570N/B, SNC-RX550N/W, SNC-RX550N/B, SNC-RX530N/W, and SNC-RX530N/B 3.00 and 2.x before 2.31; allows remote attackers to execute arbitrary code via a long first argument to the PrmSetNetworkParam method. The ActiveX Control for Sony SNC series network cameras is a software to monitor images over the network using a web browser. Failed exploit attempts likely result in denial-of-service conditions. ----------------------------------------------------------------------\n\nDid you know? Our assessment and impact rating along with detailed\ninformation such as exploit code availability, or if an updated patch\nis released by the vendor, is not part of this mailing-list?\n \nClick here to learn more about our commercial solutions:\nhttp://secunia.com/advisories/business_solutions/\n \nClick here to trial our solutions:\nhttp://secunia.com/advisories/try_vi/\n\n----------------------------------------------------------------------\n\nTITLE:\nSony Network Camera ActiveX Control Buffer Overflow Vulnerability\n\nSECUNIA ADVISORY ID:\nSA33968\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/33968/\n\nDESCRIPTION:\nA vulnerability has been reported in the Sony Network Camera ActiveX\ncontrol, which can be exploited by malicious people to compromise a\nuser\u0027s system. \n\nThe vulnerability is caused due to an unspecified error and can be\nexploited to cause a buffer overflow. \n\nSuccessful exploitation may allow execution of arbitrary code. \n\nPlease see vendor advisory for a list of products and firmware\nversions that include the affected ActiveX control. \n\nSOLUTION:\nUpdate to a fixed version. See vendor advisory for more details. \n\nPROVIDED AND/OR DISCOVERED BY:\nReported by the vendor. \n\nORIGINAL ADVISORY:\nSony:\nhttp://www.sony.jp/professional/News/info/pb20090223.html\n\nOTHER REFERENCES:\nJVN:\nhttp://jvn.jp/jp/JVN16767117/index.html\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-3488"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
},
{
"db": "VULHUB",
"id": "VHN-26850"
},
{
"db": "PACKETSTORM",
"id": "75135"
}
],
"trust": 2.34
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-26850",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-26850"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "JVNDB",
"id": "JVNDB-2009-000012",
"trust": 3.3
},
{
"db": "JVN",
"id": "JVN16767117",
"trust": 2.9
},
{
"db": "NVD",
"id": "CVE-2007-3488",
"trust": 2.8
},
{
"db": "BID",
"id": "24684",
"trust": 2.8
},
{
"db": "OSVDB",
"id": "39479",
"trust": 2.5
},
{
"db": "EXPLOIT-DB",
"id": "4120",
"trust": 1.7
},
{
"db": "XF",
"id": "35133",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528",
"trust": 0.7
},
{
"db": "MILW0RM",
"id": "4120",
"trust": 0.6
},
{
"db": "XF",
"id": "5",
"trust": 0.6
},
{
"db": "JVN",
"id": "JVN#16767117",
"trust": 0.6
},
{
"db": "BID",
"id": "33876",
"trust": 0.3
},
{
"db": "SECUNIA",
"id": "33968",
"trust": 0.2
},
{
"db": "SEEBUG",
"id": "SSVID-64771",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-26850",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "75135",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-26850"
},
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "PACKETSTORM",
"id": "75135"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"id": "VAR-200706-0390",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-26850"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-10T22:22:00.122000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "List of Affected Sony Network Cameras",
"trust": 0.8,
"url": "http://pro.sony.com/bbsc/ssr/cat-securitycameras/resource.downloads.bbsccms-assets-cat-camsec-downloads-AffectedNetworkCameras.shtml"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-119",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www.securityfocus.com/bid/24684"
},
{
"trust": 2.5,
"url": "http://jvn.jp/en/jp/jvn16767117/index.html"
},
{
"trust": 2.5,
"url": "http://jvndb.jvn.jp/ja/contents/2009/jvndb-2009-000012.html"
},
{
"trust": 2.5,
"url": "http://osvdb.org/39479"
},
{
"trust": 1.7,
"url": "http://jvn.jp/en/jp/jvn16767117/041520/index.html"
},
{
"trust": 1.7,
"url": "http://pro.sony.com/bbsc/ssr/cat-securitycameras/resource.downloads.bbsccms-assets-cat-camsec-downloads-affectednetworkcameras.shtml"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/35133"
},
{
"trust": 1.1,
"url": "https://www.exploit-db.com/exploits/4120"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35133"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-3488"
},
{
"trust": 0.8,
"url": "http://www.ipa.go.jp/security/english/vuln/200902_sonysnc_en.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-3488"
},
{
"trust": 0.6,
"url": "http://www.sony.com"
},
{
"trust": 0.6,
"url": "http://www.milw0rm.com/exploits/4120"
},
{
"trust": 0.4,
"url": "http://jvn.jp/jp/jvn16767117/index.html"
},
{
"trust": 0.4,
"url": "http://www.sony.jp/professional/news/info/pb20090223.html"
},
{
"trust": 0.3,
"url": "http://support.microsoft.com/kb/240797"
},
{
"trust": 0.3,
"url": "http://bssc.sel.sony.com/broadcastandbusiness/displaymodel?id=79540"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/33968/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/business_solutions/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/try_vi/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-26850"
},
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "PACKETSTORM",
"id": "75135"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-26850"
},
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
},
{
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"db": "PACKETSTORM",
"id": "75135"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-06-29T00:00:00",
"db": "VULHUB",
"id": "VHN-26850"
},
{
"date": "2009-02-24T00:00:00",
"db": "BID",
"id": "33876"
},
{
"date": "2007-06-27T00:00:00",
"db": "BID",
"id": "24684"
},
{
"date": "2009-03-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"date": "2009-02-24T15:54:35",
"db": "PACKETSTORM",
"id": "75135"
},
{
"date": "2007-06-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"date": "2007-06-29T18:30:00",
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-29T00:00:00",
"db": "VULHUB",
"id": "VHN-26850"
},
{
"date": "2009-02-24T20:27:00",
"db": "BID",
"id": "33876"
},
{
"date": "2015-05-07T17:37:00",
"db": "BID",
"id": "24684"
},
{
"date": "2009-03-09T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2009-000012"
},
{
"date": "2009-03-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200706-528"
},
{
"date": "2025-04-09T00:30:58.490000",
"db": "NVD",
"id": "CVE-2007-3488"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "network",
"sources": [
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sony Network Camera SNC-P5 SonySncP5View.OCX ActiveX Control Buffer Overflow Vulnerability",
"sources": [
{
"db": "BID",
"id": "24684"
},
{
"db": "CNNVD",
"id": "CNNVD-200706-528"
}
],
"trust": 0.9
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Boundary Condition Error",
"sources": [
{
"db": "BID",
"id": "33876"
},
{
"db": "BID",
"id": "24684"
}
],
"trust": 0.6
}
}