CVE-2020-5589
Multiple SONY Wireless Headphones have vulnerability that someone within the Bluetooth range can...
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
- Record
CVE-2020-5589- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 8.3 High
AV:A/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-306
- Updated
- 2026-11-02
CVE List No score
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
- Record
CVE-2020-5589- Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2020-26751 No score
SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing and operate such as changing volume of the product.
- Record
EUVD-2020-26751- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-23gm-cgq9-q86q No score
Multiple SONY Wireless Headphones have vulnerability that someone within the Bluetooth range can...
Multiple SONY Wireless Headphones have vulnerability that someone within the Bluetooth range can make the Bluetooth pairing.
- Record
GHSA-23gm-cgq9-q86q- Updated
- 2026-11-02
Affected products
- sony wf-1000x firmware
- sony wf-sp700n firmware
- sony wh-1000xm2 firmware
- sony wh-1000xm3 firmware
- sony wh-ch700n firmware
- sony wh-h900n firmware
- sony wh-xb700 firmware
- sony wh-xb900n firmware
- sony wi-1000x firmware
- sony wi-c600n firmware
- sony wi-sp600n firmware
- sony corporation wireless headphones wf-1000x, wf-sp700n, wh-1000xm2, wh-1000xm3, wh-ch700n, wh-h900n, wh-xb700, wh-xb900n, wi-1000x, wi-c600n, wi-sp600n
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-5589 is a high vulnerability (CVSS 8.8) in Sony Wf-1000x Firmware, published June 9, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. No source names a fixed version.