VULNERABILITY INTELLIGENCE
CVE-2008-1938
CVSS score6.4 MEDIUM
EPSS probability1.35%
CISA KEVNot currently listed
Published2008-04-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:P
Description
Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks.
Weakness classification
- CWE-287: Improper Authentication