Unscored severity · published Apr 25, 2008
CVE-2008-1938
Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mylo Com 2 · Sony
through 1.001; through 1.100 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1938
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1938
esupport.sony.com
http://esupport.sony.com/perl/news-item.pl?news_id=262&mdl=COM2
jvn.jp
http://jvn.jp/jp/JVN%2376788395/index.html
mylo.nccl.sony.co.jp
http://mylo.nccl.sony.co.jp/download/M-W002-001-02/index.html
mylo.nccl.sony.co.jp
http://mylo.nccl.sony.co.jp/hotnews/2008/04/01/index.html
Vendor Advisory
http://secunia.com/advisories/29928
www.securityfocus.com
http://www.securityfocus.com/bid/28905