« Volver al listado

CVE-2009-0396

Estado: ModificadaAlta (7.8)—

The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (9)

Sony Ericsson — K530iSony Ericsson — K610iSony Ericsson — K618iSony Ericsson — K660iSony Ericsson — K810iSony Ericsson — W660iSony Ericsson — W880iSony Ericsson — W910iSony Ericsson — Z610i

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-0396",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-02-03T01:30:00.377",
  "references": [
    {
      "url": "http://secunia.com/advisories/33616",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.mseclab.com/index.php?page_id=123",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/500382/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/33433",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1021634",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/33616",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mseclab.com/index.php?page_id=123",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/500382/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/33433",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1021634",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, and K530i phones allow remote attackers to cause a denial of service (device reboot or hang-up) via a malformed WAP Push packet to (1) SMS or (2) UDP port 2948."
    },
    {
      "lang": "es",
      "value": "Los teléfonos Sony Ericsson W910i, W660i, K618i, K610i, Z610i, K810i, K660i, W880i, y K530i permite a los atacantes remotos causar una denegación de servicios (el dispositivo se reinicia o cuelgue) a través de paquetes mal formados WAP Push para (1) SMS o (2) puerto UDP 2948."
    }
  ],
  "lastModified": "2026-06-16T23:04:57.593",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sony_ericsson:k530i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3BC04A9-3C41-46F3-AEE6-7D6B044DD39D"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:k610i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21053C01-D59F-4828-959E-8F361C8A93F0"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:k618i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F964C80-4E77-4CFA-AD90-B9A5DB03C10E"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:k660i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A90D412-AE46-4309-8C4C-AECB0CC006B5"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:k810i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4AFD064-4E66-422E-AB68-EE0156C48472"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:w660i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17B4356D-9FD2-4F13-8D9E-6A23889F383F"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:w880i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7DABE12-6BC4-444B-A9DE-D0EBE88F9EC9"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:w910i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "095FA09A-1FC5-4583-94B9-C3FD558889C1"
            },
            {
              "criteria": "cpe:2.3:h:sony_ericsson:z610i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C32A769A-6737-4CFC-BE1D-2AE368FF3D53"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}