Sony XAV-AX8500 Bluetooth Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Sony XAV-AX8500 Bluetooth system. This issue arises from improper isolation in the implementation of ACL-U links, which allows network-adjacent attackers to bypass authentication. The vulnerability exploits a lack of L2CAP channel isolation, enabling unauthorized access to the system.

Impact

Exploitation of this vulnerability allows for authentication bypass on the affected device, potentially leading to unauthorized access or actions within the system.

Remediation

Sony has released a firmware update to address this vulnerability. The update can be downloaded from the Sony support website for the XAV-AX8500 model. Users should ensure that the date and time are correctly set before and after the update process.