CVEvulnerability

CVE-2020-5589

8.8 HIGH Published 2020-06-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-306

Description

SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.

Affected configurations

• sony wf-1000x firmware • sony wf-sp700n firmware • sony wh-1000xm2 firmware • sony wh-1000xm3 firmware • sony wh-ch700n firmware • sony wh-h900n firmware • sony wh-xb700 firmware • sony wh-xb900n firmware • sony wi-1000x firmware • sony wi-c600n firmware • sony wi-sp600n firmware

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References