CVE-2019-11336
High
Description
Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.
SeverityHigh
CVSS8.1
Exploit probability—
ProductSony Photo Sharing Plus
PublishedMay 14, 2019
First seenMay 14, 2019
How to fix
Update
- sony photo_sharing_pluspkg6.5629 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sony photo_sharing_plus | v < pkg6.5629 | pkg6.5629 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.