Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j2pg-r74g-f5v5

Опубликовано: 20 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 2.4

Описание

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the udev rules. A crafted USB device connected to the system can trigger instantiation of otherwise restricted USB device types. An attacker can leverage this vulnerability to bypass authorization on the system. Was ZDI-CAN-28992.

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the udev rules. A crafted USB device connected to the system can trigger instantiation of otherwise restricted USB device types. An attacker can leverage this vulnerability to bypass authorization on the system. Was ZDI-CAN-28992.

EPSS

Процентиль: 13%
0.00227
Низкий

2.4 Low

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 2.4
nvd
21 день назад

Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the udev rules. A crafted USB device connected to the system can trigger instantiation of otherwise restricted USB device types. An attacker can leverage this vulnerability to bypass authorization on the system. Was ZDI-CAN-28992.

EPSS

Процентиль: 13%
0.00227
Низкий

2.4 Low

CVSS3

Дефекты

CWE-285