VULNERABILITY INTELLIGENCE
CVE-2009-0396
CVSS score7.8 HIGH
EPSS probability1.67%
CISA KEVNot currently listed
Published2009-02-03
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948.
Weakness classification
- CWE-20: Improper Input Validation