CVE-2016-7830 (GCVE-0-2016-7830)
Vulnerability from cvelistv5
Published
2017-06-09 16:00
Modified
2024-08-06 02:04
Severity ?
CWE
  • Authentication bypass
Summary
Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.
References
Impacted products
Vendor Product Version
Sony Corporation PCS-XG100 Version: firmware versions prior to Ver.1.51
 Create a notification for this product.
   Sony Corporation PCS-XG100S Version: firmware versions prior to Ver.1.51
 Create a notification for this product.
   Sony Corporation PCS-XG100C Version: firmware versions prior to Ver.1.51
 Create a notification for this product.
   Sony Corporation PCS-XG77 Version: firmware versions prior to Ver.1.51
 Create a notification for this product.
   Sony Corporation PCS-XG77S Version: firmware versions prior to Ver.1.51
 Create a notification for this product.
   Sony Corporation PCS-XG77C Version: firmware versions prior to Ver.1.51
 Create a notification for this product.
   Sony Corporation PCS-XC1 Version: firmware version prior to Ver.1.22
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:04:56.072Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf"
          },
          {
            "name": "JVN#42070907",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN42070907/index.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PCS-XG100",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware versions prior to Ver.1.51"
            }
          ]
        },
        {
          "product": "PCS-XG100S",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware versions prior to Ver.1.51"
            }
          ]
        },
        {
          "product": "PCS-XG100C",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware versions prior to Ver.1.51"
            }
          ]
        },
        {
          "product": "PCS-XG77",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware versions prior to Ver.1.51"
            }
          ]
        },
        {
          "product": "PCS-XG77S",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware versions prior to Ver.1.51"
            }
          ]
        },
        {
          "product": "PCS-XG77C",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware versions prior to Ver.1.51"
            }
          ]
        },
        {
          "product": "PCS-XC1",
          "vendor": "Sony Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "firmware version prior to Ver.1.22"
            }
          ]
        }
      ],
      "datePublic": "2016-12-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-09T15:57:01",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf"
        },
        {
          "name": "JVN#42070907",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "https://jvn.jp/en/jp/JVN42070907/index.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2016-7830",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PCS-XG100",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware versions prior to Ver.1.51"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PCS-XG100S",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware versions prior to Ver.1.51"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PCS-XG100C",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware versions prior to Ver.1.51"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PCS-XG77",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware versions prior to Ver.1.51"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PCS-XG77S",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware versions prior to Ver.1.51"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PCS-XG77C",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware versions prior to Ver.1.51"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "PCS-XC1",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "firmware version prior to Ver.1.22"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Sony Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authentication bypass"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf",
              "refsource": "CONFIRM",
              "url": "https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf"
            },
            {
              "name": "JVN#42070907",
              "refsource": "JVN",
              "url": "https://jvn.jp/en/jp/JVN42070907/index.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2016-7830",
    "datePublished": "2017-06-09T16:00:00",
    "dateReserved": "2016-09-09T00:00:00",
    "dateUpdated": "2024-08-06T02:04:56.072Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2016-7830\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2017-06-09T16:29:01.080\",\"lastModified\":\"2025-04-20T01:37:25.860\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"Dispositivos Sony PCS-XG77C, PCS-XG77C, PCS-XG77C, PCS-XG77C, PCS-XG77C con versiones de firmware anteriores a la versi\u00f3n 1.51 y dispositivos PCS-XC1 con versi\u00f3n de firmware anterior a la versi\u00f3n 1.22, permiten a un atacante en el mismo segmento de red omitir la autenticaci\u00f3n para realizar operaciones administrativas a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:A/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":5.8,\"accessVector\":\"ADJACENT_NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":6.5,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-306\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sony:pcs-xg100_firmware:1.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59D66787-EA68-459A-8B6B-DDE3297A686F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xg100:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22E568C0-86AF-4886-9709-A83018CE6C2F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xg100s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D37C7C1-76E1-42FE-9A64-B3A6DDDA5DC7\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sony:pcs-xg100_firmware:1.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB542813-B53F-44BD-B8D5-161667E77411\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xg100c:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0817A1C4-2A4F-4D79-AC63-100A1D4B5998\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sony:pcs-xg77_firmware:1.50:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1374A1FF-C50E-442B-9549-E4F388946128\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xg77:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"030DCC5E-8633-4086-BAC9-F5FD4E7D46D4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xg77s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EEDB48B7-9DC3-422D-A649-7B7C094B4ED8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sony:pcs-xg77_firmware:1.42:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C667897-92BE-45E7-9B4D-426D80511D67\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xg77c:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"657B512E-81A1-4603-904E-1875814BF48B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:sony:pcs-xc1_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.21\",\"matchCriteriaId\":\"4D21324B-1210-4E7F-80FB-3FD284035B7A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:sony:pcs-xc1:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8141874D-CF91-4A17-A56E-EE8B10E0C66B\"}]}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN42070907/index.html\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf\",\"source\":\"vultures@jpcert.or.jp\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://jvn.jp/en/jp/JVN42070907/index.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.