CVE-2018-16594
High
Description
The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal.
SeverityHigh
CVSS8.1
Exploit probability60. percentile0.9%
ProductSony R5c Firmware
PublishedJun 19, 2019
First seenJun 19, 2019
How to fix
Update
- sony r5c_firmware8.590 or later
- sony wd75_firmware8.216 or later
- sony wd65_firmware8.216 or later
- sony xe70_firmware8.764 or later
- sony xf70_firmware8.764 or later
- sony we75_firmware8.464 or later
- sony we6_firmware8.464 or later
- sony wf6_firmware8.464 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sony r5c_firmware | v < 8.590 | 8.590 |
| sony wd75_firmware | v < 8.216 | 8.216 |
| sony wd65_firmware | v < 8.216 | 8.216 |
| sony xe70_firmware | v < 8.764 | 8.764 |
| sony xf70_firmware | v < 8.764 | 8.764 |
| sony we75_firmware | v < 8.464 | 8.464 |
| sony we6_firmware | v < 8.464 | 8.464 |
| sony wf6_firmware | v < 8.464 | 8.464 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.