PatchTheCVEsony vulnerabilities
Recent CVEs affecting sony products. 14 tracked.
sony has 14 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-01-06. Highest priority: CVE-2020-36885 (score 64/100).
- CVE-2025-64730 MEDIUM 6.1 MITIGATE Cross-site scripting vulnerability exists in SNC-CX600W all versions
- CVE-2025-62497 MEDIUM 6.5 UPGRADE Cross-site request forgery vulnerability exists in SNC-CX600W versions prior to Ver.2.8.0
- CVE-2025-5820 HIGH 8.8 UPGRADE Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability
- CVE-2025-5479 HIGH 7.5 UPGRADE Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-5478 HIGH 8.8 UPGRADE Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability
- CVE-2025-5477 HIGH 7.5 UPGRADE Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-5476 HIGH 8.8 UPGRADE Sony XAV-AX8500 Bluetooth Improper Isolation Authentication Bypass Vulnerability
- CVE-2025-5475 HIGH 7.5 UPGRADE Sony XAV-AX8500 Bluetooth Packet Handling Integer Overflow Remote Code Execution Vulnerability
- CVE-2024-23972 MEDIUM 6.8 MITIGATE Sony XAV-AX5500 USB Configuration Descriptor Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-23922 MEDIUM 6.8 MITIGATE Sony XAV-AX5500 Insufficient Firmware Update Validation Remote Code Execution Vulnerability
- CVE-2020-36924 MEDIUM 6.1 UPGRADE Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inje
- CVE-2020-36923 CRITICAL 9.8 UPGRADE Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attac
- CVE-2020-36922 HIGH 7.5 UPGRADE Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated
- CVE-2020-36885 CRITICAL 9.8 UPGRADE Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint
FAQ
How do I fix sony vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sony being exploited right now?
None of the tracked sony CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sony CVE should I patch first?
CVE-2020-36885 currently ranks highest (64/100): Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint.