What is CVE-2018-0690?

CVE-2018-0690 is a high-severity vulnerability in Sony Music Center For Pc. CVSS score: 7.5/10. Published 2018-11-15.

How severe is CVE-2018-0690?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Sony Music Center For Pc

CVE-2018-0690

An unvalidated software update vulnerability in Music Center for PC version 1.0.02 and earlier could allow a man-in-the-middle attacker to tamper with an update file and inject executable files.

EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Sony Music_center_for_pc
Sony Video & Sound Products Inc. Music Center For Pc — versions version 1.0.02 and earlier

References

vultures@jpcert.or.jp (Third Party Advisory, x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2018-0690?: CVE-2018-0690 is a high-severity vulnerability in Sony Music Center For Pc. CVSS score: 7.5/10. Published 2018-11-15.
How severe is CVE-2018-0690?: High severity. CVSS v3 base score is 7.5 out of 10.