Read the docs

Sony

Records91All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

Sony records in CISA KEV

No Sony vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

91 records

Priority HIGH 75

A vulnerability classified as critical has been found in Sony SNC-M1, SNC-M3, SNC-RZ25N, SNC-RZ30N, SNC-DS10, SNC-CS3N and SNC-RX570N up to 1.30.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01021 Published 2025-05-24 No fix listed CWE-1392
Priority MEDIUM 63

Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00541 Published 2026-01-06 No fix listed CWE-829
Priority MEDIUM 59

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a lo…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16155 Published 2008-02-13 No fix listed CWE-119
TI-2022-07797 CVE-2022-23747 · GHSA-hwpq-wv46-76qx

Buffer overflow in Sony Xperia

Priority MEDIUM 55

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10535 Published 2022-08-17 No fix listed CWE-120
Priority MEDIUM 54

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.12843 Published 2012-06-07 No fix listed CWE-119
TI-2018-02905 CVE-2018-3937 · GHSA-p9pj-phj7-ppf9

OS command injection in Talos Sony

Priority MEDIUM 51

An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00.

CVSS 3.0CRITICAL 9.1 Network High privileges No interaction EPSS 0.09617 Published 2018-08-14 No fix listed CWE-78
TI-2018-02906 CVE-2018-3938 · GHSA-7qmf-37fc-vqcp

Out-of-bounds write in Talos Sony

Priority MEDIUM 49

An exploitable stack-based buffer overflow vulnerability exists in the 802dot1xclientcert.cgi functionality of Sony IPELA E Series Camera G5 firmware 1.87.00.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03299 Published 2018-08-14 No fix listed CWE-787
Priority MEDIUM 45

SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03869 Published 2017-04-13 No fix listed CWE-200
Priority MEDIUM 45

The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related i…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03442 Published 2009-07-20 No fix listed CWE-400
Priority MEDIUM 42

Sony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01028 Published 2024-09-23 No fix listed CWE-121
TI-2026-15032 CVE-2026-18279 · GHSA-w47w-hvhg-f7v6

Buffer overflow in Sony XAV-9500ES

Priority MEDIUM 41

Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00686 Published 2026-08-20 No fix listed CWE-120
Priority MEDIUM 41

Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a d…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.03206 Published 2019-05-14 No fix listed CWE-532
Priority MEDIUM 41

Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and possibly other camera mo…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08756 Published 2013-10-01 No fix listed CWE-352
Load more
Open these records in search →