Sony SNC-CX600W Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in all versions of the Sony SNC-CX600W camera. This vulnerability allows an attacker to execute arbitrary scripts in the web browser of a user who accesses the product.

Impact

Exploitation of this vulnerability enables the execution of arbitrary scripts in the web browser of the user accessing the affected camera.

Remediation

Users are advised to change the default administrator login credentials, enable HTTPS for encrypted communication, and log out and close the browser after completing administrative tasks.