CVE-2024-23922mediumCWE-345

CVE-2024-23922: medium-severity vulnerability in Sony XAV-AX5500

Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability

Published

Follow this CVE+ Monitor XAV-AX5500

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.8epss 1.8%
from disclosure to weapon197 days
Published on NVDSep 23
1st PoC+197d
In short

The Sony XAV-AX5500 car head unit does not properly verify firmware updates, allowing an attacker with physical access to install malicious code and take control of the device without needing a password.

Technical detail

The vulnerability exists in the firmware update mechanism due to insufficient validation of update packages (CWE-345). An attacker with physical access can exploit this to execute arbitrary code with device privileges; no authentication is required, making it exploitable during the update process.

Summary generated and translated by AI from the official description.
Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Sony XAV-AX5500 devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue results from the lack of proper validation of software update packages. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-22939
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Sony · XAV-AX5500
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Sony XAV-AX5500

In the same product, most dangerous first.

CVE-2024-23934HIGHSony XAV-AX5500 WMV/ASF Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 1.0%CVE-2024-23972MEDIUMSony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.9%CVE-2024-23933MEDIUMSony XAV-AX5500 CarPlay TLV Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.8%