CVE-2020-36922 | BDVDB-2026-309201 Detail
Pro-BraviaSony BRAVIA Digital Signage
Description#
Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: network.
Weaknesses#
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
References#
- https://www.exploit-db.com/exploits/49187
- https://pro-bravia.sony.net
- https://pro-bravia.sony.net/resources/software/bravia-signage/
- https://pro.sony/ue_US/products/display-software
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5610.php
- https://packetstorm.news/files/id/160343
- https://cxsecurity.com/issue/WLB-2020120028
- https://exchange.xforce.ibmcloud.com/vulnerabilities/192606
- https://www.vulncheck.com/advisories/sony-bravia-digital-signage-unauthenticated-system-api-information-disclosure
Exploit#
History#
- Version 1Record published in the CVE List.