CVE Feed

    Dashboard / CVE / CVE-2019-11336

    CVE-2019-11336

    Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.

    Published:May 14, 2019
    Last Modified:Nov 21, 2024
    EPS:May 14, 2019
    EPSS Score:0.03331
    CVSS Score:8.1

    Affected Products

    Vendor
    Sony
    Product
    Kdl-50w800c
    Vendor
    Sony
    Product
    Kdl-50w805c
    Vendor
    Sony
    Product
    Kdl-50w807c
    Vendor
    Sony
    Product
    Kdl-50w809c
    Vendor
    Sony
    Product
    Kdl-50w820c
    Vendor
    Sony
    Product
    Kdl-55w800c
    Vendor
    Sony
    Product
    Kdl-55w805c
    Vendor
    Sony
    Product
    Kdl-65w850c
    Vendor
    Sony
    Product
    Kdl-65w855c
    Vendor
    Sony
    Product
    Kdl-65w857c
    Vendor
    Sony
    Product
    Kdl-75w850c
    Vendor
    Sony
    Product
    Kdl-75w855c
    Vendor
    Sony
    Product
    Photo Sharing Plus
    Vendor
    Sony
    Product
    X7500d
    Vendor
    Sony
    Product
    Xbr-100z9d
    Vendor
    Sony
    Product
    Xbr-43x800d
    Vendor
    Sony
    Product
    Xbr-43x800e
    Vendor
    Sony
    Product
    Xbr-43x830c
    Vendor
    Sony
    Product
    Xbr-49x700d
    Vendor
    Sony
    Product
    Xbr-49x800c
    Vendor
    Sony
    Product
    Xbr-49x800d
    Vendor
    Sony
    Product
    Xbr-49x800e
    Vendor
    Sony
    Product
    Xbr-49x830c
    Vendor
    Sony
    Product
    Xbr-49x835c
    Vendor
    Sony
    Product
    Xbr-49x835d
    Vendor
    Sony
    Product
    Xbr-49x837c
    Vendor
    Sony
    Product
    Xbr-49x839c
    Vendor
    Sony
    Product
    Xbr-49x900e
    Vendor
    Sony
    Product
    Xbr-55a1e
    Vendor
    Sony
    Product
    Xbr-55x700d
    Vendor
    Sony
    Product
    Xbr-55x800e
    Vendor
    Sony
    Product
    Xbr-55x805c
    Vendor
    Sony
    Product
    Xbr-55x806e
    Vendor
    Sony
    Product
    Xbr-55x807c
    Vendor
    Sony
    Product
    Xbr-55x809c
    Vendor
    Sony
    Product
    Xbr-55x810c
    Vendor
    Sony
    Product
    Xbr-55x850c
    Vendor
    Sony
    Product
    Xbr-55x850d
    Vendor
    Sony
    Product
    Xbr-55x855c
    Vendor
    Sony
    Product
    Xbr-55x855d
    Vendor
    Sony
    Product
    Xbr-55x857c
    Vendor
    Sony
    Product
    Xbr-55x857d
    Vendor
    Sony
    Product
    Xbr-55x900c
    Vendor
    Sony
    Product
    Xbr-55x900e
    Vendor
    Sony
    Product
    Xbr-55x905c
    Vendor
    Sony
    Product
    Xbr-55x907c
    Vendor
    Sony
    Product
    Xbr-55x930d
    Vendor
    Sony
    Product
    Xbr-55x930e
    Vendor
    Sony
    Product
    Xbr-65a1e
    Vendor
    Sony
    Product
    Xbr-65x750d
    Vendor
    Sony
    Product
    Xbr-65x800c
    Vendor
    Sony
    Product
    Xbr-65x805c
    Vendor
    Sony
    Product
    Xbr-65x807c
    Vendor
    Sony
    Product
    Xbr-65x809c
    Vendor
    Sony
    Product
    Xbr-65x810c
    Vendor
    Sony
    Product
    Xbr-65x850c
    Vendor
    Sony
    Product
    Xbr-65x850d
    Vendor
    Sony
    Product
    Xbr-65x850e
    Vendor
    Sony
    Product
    Xbr-65x855c
    Vendor
    Sony
    Product
    Xbr-65x855d
    Vendor
    Sony
    Product
    Xbr-65x857c
    Vendor
    Sony
    Product
    Xbr-65x857d
    Vendor
    Sony
    Product
    Xbr-65x900c
    Vendor
    Sony
    Product
    Xbr-65x900e
    Vendor
    Sony
    Product
    Xbr-65x905c
    Vendor
    Sony
    Product
    Xbr-65x907c
    Vendor
    Sony
    Product
    Xbr-65x930c
    Vendor
    Sony
    Product
    Xbr-65x930d
    Vendor
    Sony
    Product
    Xbr-65x930e
    Vendor
    Sony
    Product
    Xbr-65x935d
    Vendor
    Sony
    Product
    Xbr-65x937d
    Vendor
    Sony
    Product
    Xbr-65z9d
    Vendor
    Sony
    Product
    Xbr-75x850c
    Vendor
    Sony
    Product
    Xbr-75x850d
    Vendor
    Sony
    Product
    Xbr-75x850e
    Vendor
    Sony
    Product
    Xbr-75x855c
    Vendor
    Sony
    Product
    Xbr-75x855d
    Vendor
    Sony
    Product
    Xbr-75x857d
    Vendor
    Sony
    Product
    Xbr-75x900e
    Vendor
    Sony
    Product
    Xbr-75x910c
    Vendor
    Sony
    Product
    Xbr-75x940c
    Vendor
    Sony
    Product
    Xbr-75x940d
    Vendor
    Sony
    Product
    Xbr-75x940e
    Vendor
    Sony
    Product
    Xbr-75x945c
    Vendor
    Sony
    Product
    Xbr-75z9d
    Vendor
    Sony
    Product
    Xbr-77a1e
    Vendor
    Sony
    Product
    Xbr-85x850d
    Vendor
    Sony
    Product
    Xbr-85x855d
    Vendor
    Sony
    Product
    Xbr-85x857d

    Exploits

    http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.htmlhttp://seclists.org/fulldisclosure/2019/Apr/32https://seclists.org/bugtraq/2019/Apr/34https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.htmlhttp://seclists.org/fulldisclosure/2019/Apr/32https://seclists.org/bugtraq/2019/Apr/34https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-215 Fuzzing for application mapping

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High