Sony XAV-AX8500 Bluetooth ERTM Channel Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Sony XAV-AX8500 Bluetooth ERTM channel communication. This issue arises from improper initialization of channel data, allowing network-adjacent attackers to bypass authentication on the affected device. The vulnerability can be exploited without authentication.

Impact

Exploitation of this vulnerability allows for authentication to be bypassed on the affected device.

Remediation

Sony has released a firmware update to address this vulnerability. Users can download the update from the Sony support website for the XAV-AX8500 model.