Unvalidated Software Update Vulnerability in Music Center for PC by Sony
CVE-2018-0690

7.5HIGH

Key Information:

Vendor

Sony Video & Sound Products Inc.

Status
Music Center For Pc
Vendor
CVE Published:
15 November 2018

What is CVE-2018-0690?

A vulnerability exists in Music Center for PC versions up to 1.0.02, allowing attackers to potentially manipulate software updates. This flaw could enable a man-in-the-middle attack, where an adversary intercepts update requests and injects malicious executable files into the process, compromising the integrity of the software and potentially leading to unauthorized access or control over the affected system. Users are advised to be cautious about updates and verify their authenticity.

Affected Version(s)

Music Center for PC version 1.0.02 and earlier

References

http://jvn.jp/en/jp/JVN36623716/index.html
third-party-advisoryx_refsource_JVN
https://musiccenter.sony.net/en/downloads/update.php
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.