Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the USB host driver. A crafted USB configuration descriptor can trigger an overflow of a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the device.
Was ZDI-CAN-23185
References
| Link | Resource |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-24-876/ | Third Party Advisory VDB Entry |
| https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax5500/software/00274156 | Patch |
Configurations
Configuration 1 (hide)
| AND |
|
History
30 Sep 2024, 15:37
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.8 |
| CWE | CWE-120 | |
| CPE | cpe:2.3:h:sony:xav-ax5500:-:*:*:*:*:*:*:* cpe:2.3:o:sony:xav-ax5500_firmware:1.13:*:*:*:*:*:*:* |
|
| References | () https://www.sony.com/electronics/support/mobile-cd-players-digital-media-players-xav-series/xav-ax5500/software/00274156 - Patch | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-24-876/ - Third Party Advisory, VDB Entry | |
| First Time |
Sony xav-ax5500
Sony Sony xav-ax5500 Firmware |
23 Sep 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-23 15:15
Updated : 2024-09-30 15:37
NVD link : CVE-2024-23972
Mitre link : CVE-2024-23972
JSON object : View
Products Affected
sony
- xav-ax5500
- xav-ax5500_firmware
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')