← Back to CVEs

CVE-2021-20793

HIGH

7.8

Description

Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published8/26/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

sony:audio_usb_driversony:hap_music_transfer

Weaknesses (CWE)

CWE-427

References

https://jvn.jp/en/jp/JVN80288258/index.html(vultures@jpcert.or.jp)

https://www.sony.co.uk/electronics/support/software/00266642(vultures@jpcert.or.jp)

https://www.sony.co.uk/electronics/support/software/00266749(vultures@jpcert.or.jp)

https://www.sony.co.uk/electronics/support/software/00266758(vultures@jpcert.or.jp)

https://jvn.jp/en/jp/JVN80288258/index.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.sony.co.uk/electronics/support/software/00266642(af854a3a-2127-422b-91ae-364da2661108)

https://www.sony.co.uk/electronics/support/software/00266749(af854a3a-2127-422b-91ae-364da2661108)

https://www.sony.co.uk/electronics/support/software/00266758(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.