CVE-2019-5982
Last modified
CVE-2019-5982 is a vulnerability of currently unknown severity. Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
Improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier allows remote attackers to conduct a man-in-the-middle attack via a malicous wireless LAN access point. A successful exploitation may result in a malicious file being downloaded/executed.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sony | Vaio Update | <= 7.3.0.03150 |
References
- https://jvn.jp/en/jp/JVN13555032/index.htmlThird Party Advisory
- https://www.sony.com/electronics/support/articles/00228777Vendor Advisory
- https://jvn.jp/en/jp/JVN13555032/index.htmlThird Party Advisory
- https://www.sony.com/electronics/support/articles/00228777Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-5982?
How severe is CVE-2019-5982?
How do I fix CVE-2019-5982?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-5976Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with admini…4.9
- CVE-2019-5977Mail header injection vulnerability in Cybozu Garoon 4.0.0 t…4.3
- CVE-2019-5978Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2…6.1
- CVE-2019-5979Cross-site request forgery (CSRF) vulnerability in Personali…8.8
- CVE-2019-5980Cross-site request forgery (CSRF) vulnerability in Related Y…8.8
- CVE-2019-5981Improper authorization vulnerability in VAIO Update 7.3.0.03…
- CVE-2019-5983Cross-site request forgery (CSRF) vulnerability in HTML5 Map…8.8
- CVE-2019-5984Cross-site request forgery (CSRF) vulnerability in Custom CS…8.8
- CVE-2019-5985Cross-site scripting vulnerability in Hikari Denwa router/Ho…6.1
- CVE-2019-5986Cross-site request forgery (CSRF) vulnerability in Hikari De…8.8
- CVE-2019-5987Access analysis CGI An-Analyzer released in 2019 June 24 and…8.8
- CVE-2019-5988Stored cross-site scripting vulnerability in Access analysis…6.1
Are you affected by CVE-2019-5982?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST