CVE-2019-5982

CVE-2019-5982 describes an improper download file verification vulnerability in VAIO Update 7.3.0.03150 and earlier, affecting Sony VAIO Update software. This high-severity vulnerability (CVSS 7.5) allows a remote attacker to conduct a man-in-the-middle attack over a malicious wireless LAN, potentially leading to the download and execution of malicious files with high impact on confidentiality, integrity, and availability. While the EPSS score is low and there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the potential for a complete system compromise exists under specific network conditions. Community discussion and media coverage for this CVE are minimal.