High severity · published Jun 9, 2020
CVE-2020-5589
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to…
8.8
CVSS
0.6%
EPSS
No
On KEV
Description
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WF
Wf-1000x Firmware · Sony
All versions, or not specified · source: NVD
WF
Wf-sp700n Firmware · Sony
All versions, or not specified · source: NVD
WF
Wh-1000xm2 Firmware · Sony
All versions, or not specified · source: NVD
WF
Wh-1000xm3 Firmware · Sony
All versions, or not specified · source: NVD
WF
Wh-ch700n Firmware · Sony
All versions, or not specified · source: NVD
WF
Wh-h900n Firmware · Sony
All versions, or not specified · source: NVD
WF
Wh-xb700 Firmware · Sony
All versions, or not specified · source: NVD
WF
Wh-xb900n Firmware · Sony
All versions, or not specified · source: NVD
WF
Wi-1000x Firmware · Sony
All versions, or not specified · source: NVD
WF
Wi-c600n Firmware · Sony
All versions, or not specified · source: NVD
WF
Wi-sp600n Firmware · Sony
All versions, or not specified · source: NVD