CVE-2020-36922

Опубликовано: 06 янв. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

Ссылки

https://cxsecurity.com/issue/WLB-2020120028
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/192606
Third Party Advisory
https://packetstorm.news/files/id/160343
Third Party Advisory
https://pro-bravia.sony.net
Product
https://pro-bravia.sony.net/resources/software/bravia-signage/
Product
https://pro.sony/ue_US/products/display-software
Product
https://www.exploit-db.com/exploits/49187
Exploit
Third Party Advisory
VDB Entry
https://www.vulncheck.com/advisories/sony-bravia-digital-signage-unauthenticated-system-api-information-disclosure
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5610.php
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sony:bravia_signage:*:*:*:*:*:*:*:*

Версия до 1.7.8 (включая)

EPSS

Процентиль: 34%

0.0014

Низкий

7.5 High

CVSS3

Дефекты

CWE-497

Связанные уязвимости

GHSA-xx55-j824-wmvf