What’s Vulnerable › Vulnerabilities

CVE-2020-5589

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-09 · updated 2026-06-17
• Weakness: CWE-306

Description

SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.

Affected products

• Sony Wf-1000X Firmware: all versions
• Sony Wf-Sp700N Firmware: all versions
• Sony Wh-1000Xm2 Firmware: all versions
• Sony Wh-1000Xm3 Firmware: all versions
• Sony Wh-Ch700N Firmware: all versions
• Sony Wh-H900N Firmware: all versions
• Sony Wh-Xb700 Firmware: all versions
• Sony Wh-Xb900N Firmware: all versions
• Sony Wi-1000X Firmware: all versions
• Sony Wi-C600N Firmware: all versions
• Sony Wi-Sp600N Firmware: all versions

References

• https://jvn.jp/en/jp/JVN67447798/
• https://www.sony.com/electronics/support/audio-video-headphones
• https://jvn.jp/en/jp/JVN67447798/
• https://www.sony.com/electronics/support/audio-video-headphones

Get alerted when CVE-2020-5589 or the next vulnerability affects your stack