CVE-2019-11336 (GCVE-0-2019-11336)
Vulnerability from cvelistv5 – Published: 2019-05-14 13:57 – Updated: 2024-08-04 22:48
VLAI
EPSS
VEX
Summary
Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.
Severity
8.1 (High)
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://seclists.org/fulldisclosure/2019/Apr/32 | mailing-listx_refsource_FULLDISC |
| http://packetstormsecurity.com/files/152612/Sony-… | x_refsource_MISC |
| https://seclists.org/bugtraq/2019/Apr/34 | mailing-listx_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/108072 | vdb-entryx_refsource_BID |
| https://www.darkmatter.ae/xen1thlabs/sony-smart-t… | x_refsource_MISC |
Date Public
2019-04-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T22:48:09.177Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20190423 Multiple vulnerabilities in Sony Smart TVs",
"tags": [
"mailing-list",
"x_refsource_FULLDISC",
"x_transferred"
],
"url": "http://seclists.org/fulldisclosure/2019/Apr/32"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"
},
{
"name": "20190424 Multiple vulnerabilities in Sony Smart TVs",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "https://seclists.org/bugtraq/2019/Apr/34"
},
{
"name": "108072",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/108072"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2019-04-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-05-14T13:57:24.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20190423 Multiple vulnerabilities in Sony Smart TVs",
"tags": [
"mailing-list",
"x_refsource_FULLDISC"
],
"url": "http://seclists.org/fulldisclosure/2019/Apr/32"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"
},
{
"name": "20190424 Multiple vulnerabilities in Sony Smart TVs",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "https://seclists.org/bugtraq/2019/Apr/34"
},
{
"name": "108072",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/108072"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2019-11336",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20190423 Multiple vulnerabilities in Sony Smart TVs",
"refsource": "FULLDISC",
"url": "http://seclists.org/fulldisclosure/2019/Apr/32"
},
{
"name": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html",
"refsource": "MISC",
"url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"
},
{
"name": "20190424 Multiple vulnerabilities in Sony Smart TVs",
"refsource": "BUGTRAQ",
"url": "https://seclists.org/bugtraq/2019/Apr/34"
},
{
"name": "108072",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/108072"
},
{
"name": "https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/",
"refsource": "MISC",
"url": "https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2019-11336",
"datePublished": "2019-05-14T13:57:24.000Z",
"dateReserved": "2019-04-18T00:00:00.000Z",
"dateUpdated": "2024-08-04T22:48:09.177Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-11336",
"date": "2026-09-20",
"epss": "0.03206",
"percentile": "0.87591"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sony:photo_sharing_plus:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7E890A29-7E1E-435E-BFCB-16D090CC2C6F",
"versionEndExcluding": "pkg6.5629",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sony:kdl-50w800c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "959C70FF-13E9-4C3C-821F-CA128B68C58D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-50w805c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4BB1ADDF-C47B-40FA-8CB6-8BDF3C7154FB",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-50w807c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E70D3FC8-3CD8-4350-BA1A-3FFA1B7F4C94",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-50w809c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "329FC69F-C9DA-4B6D-AEDE-204B4BE06489",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-50w820c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "129D4803-25FA-4469-B132-69AF68E215C5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-55w800c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2EF86EC7-A1DD-4F40-93EF-24E8120B99D7",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-55w805c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1ABE5A82-F389-4EB2-95B8-174E20CCCE76",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-65w850c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BEC8C6F7-6EA1-4306-90AC-01D059D30261",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-65w855c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DC6BE05D-E4BD-45ED-8AE0-751533F2AACE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-65w857c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CCE3EC16-5290-4B29-9777-30AE846E3FA1",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-75w850c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "991A64C7-2678-4042-BE08-39D7DBB1463D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:kdl-75w855c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E7564892-0034-4607-A040-82FC03EA3627",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:x7500d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BC6A8615-0135-4AFB-8B77-A037AD2AD46C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-100z9d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D5990CBB-481F-4DF6-959A-BE3140211C03",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-43x800d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "20A86592-20F7-44A8-ABA5-450E28E3FA9D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-43x800e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "888106F9-BE1D-4D67-B5BA-5932D4BA491F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-43x830c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C274F605-611D-45C6-9784-6C5D5C0B2A05",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x700d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5CC7240D-2CBE-4A36-B98A-637DF1907E75",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x800c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ED21FC83-2A01-4F0F-9531-FFE1E777BF55",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x800d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B681538E-A20B-47CE-A5DC-5E5DDF45CAE9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x800e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CA6FBA71-E121-4785-92D3-CFD2954937EF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x830c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F34B8D7C-D686-4F0F-9DC6-3CC842350CCC",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x835c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1AE62169-5642-4EBF-81FA-D01BD9B3499D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x835d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "0D8646D2-D413-4D37-A6AA-041DB30A907A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x837c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "89945794-49F2-4671-AA9F-A351BC3FB74D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x839c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EAF45D42-8038-4701-A568-5AA0906651AE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-49x900e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "89295430-CD3C-4159-8F94-95537ECF9E6D",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55a1e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AB7D4810-E08C-4D57-857C-03B550DA4907",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x700d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D772D325-C943-4B78-AA22-E20CB108C06C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x800e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BEDD932E-C844-48D3-BA58-EDBBD3858B4C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x805c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B94E0657-A28B-491D-9165-149FED2EBBBA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x806e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8C71281-E7D3-44BB-A9D9-951F0514401A",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x807c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E1C53B56-0A54-480B-A267-D692C8B65169",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x809c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7394B413-C9C1-476F-939C-20A2AE0568BF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x810c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AE714E89-CF3A-48F5-8D8D-DC6B91B5A93C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x850c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "506B28F7-E6B9-48CA-AA3C-3B2CCF750BA3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x850d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8036AF3-B0AA-49A8-BF17-5AAD05261049",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x855c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "76AE7635-D579-4031-A9FD-0F39C4D305AE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x855d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DB46D9E0-E7B6-49EB-B3AD-2C79197ADDDF",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x857c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B122639F-B902-4202-821E-A9C4318E4FD9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x857d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ADE01949-0DD1-4B37-8DB5-FDC2D6844602",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x900c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "904AA77A-C57F-4476-99F1-98B936BB1D2E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x900e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8A6CC066-8512-4C02-A23C-C759317AC705",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x905c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AA3E9F10-5283-4EC4-BFA4-B9A3785A7F22",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x907c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "62B6DAA1-7494-4063-880A-EB14B8FD3150",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x930d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CA8C3782-8A2E-4268-8AD3-4B3B8C83CBE2",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-55x930e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "183D906C-04F1-424B-9AF7-FECACD7298AE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65a1e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4D44273A-8947-4E3C-850C-C8908104EFF5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x750d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BABC9F21-1B70-405F-B173-C9426FB559B5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x800c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A466EEAD-33B8-4CDC-9A9D-11FA55A970C0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x805c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AC477911-6CDA-4CA2-9AB6-CD5FF81AAA61",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x807c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C39CFFCC-48C2-4B5C-A202-59D429BB810C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x809c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7A2037C6-694E-4263-AFBA-34396187E8F5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x810c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "06136D31-E072-4B2C-B08C-74BF9681286C",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x850c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E552BE39-E1C2-46CB-9827-06239FF93B49",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x850d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "190B3867-0B4A-4A70-9F55-3547727B0173",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x850e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "47F99A12-A4F6-4A7B-9B7E-C972F7A077F8",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x855c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "39E71E6E-9C5C-403D-B53A-535A63DD7F51",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x855d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "DA0853B8-7839-4954-97BC-F79EF61FA5C9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x857c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2478A1DF-B9AB-426D-B426-47479DFF93E9",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x857d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2AADF6EC-9A78-479C-AF94-1CA78C569280",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x900c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "6140C1CE-71C1-465F-AB1F-863AF72A9732",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x900e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "345BF296-998D-4BA6-A64C-B7CDCD0D46C0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x905c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F5509F41-EB00-4328-866F-0D53307986F0",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x907c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1CBA4A87-F0B8-4364-A8B3-777E980F51CA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x930c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8368777D-D15E-4680-B586-5DEE797E6833",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x930d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1B39FC21-0E35-4121-9390-9E979F5FE269",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x930e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C24A44F1-32A6-4D9C-8754-1BCDD51679FA",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x935d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "97990738-1441-42ED-AA09-1FAFDE0E5FA5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65x937d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FC2240A3-7BCF-49D7-9B44-C0EDFCFD382F",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-65z9d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "BD02259D-E003-4AFB-A637-CE11174BF726",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x850c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "34EDC3E7-334D-499C-9CD5-350BBDBCA592",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x850d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "37B11B1B-B3A3-499B-A9E3-CD63313A168E",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x850e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8F2CDAD9-716B-4925-BD07-2E1BFAFE1C21",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x855c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "25EB300A-F947-49BF-AFC0-5284F525FA73",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x855d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "30E8D96E-6D2C-4400-81BE-0FA9CF819C75",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x857d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "024725D1-9A32-4AE9-94CC-92FAFA1D16FE",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x900e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D678D49B-F943-440E-AAFD-7940D8EED08B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x910c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E7EFB32A-6C1D-4FE2-BC5C-4161615F6AB3",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x940c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8AD055B9-449D-4333-A088-7709AB2021C5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x940d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "67B04B6A-EBFE-418C-AD87-FC8C3B3D9717",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x940e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B17CD634-C1E5-487F-BC84-9D0029A0BE86",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75x945c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "33D45F12-708B-48E5-8A55-0E8D192D7A46",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-75z9d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B227766B-D36A-4E14-9846-2ED1DF137661",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-77a1e:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F9A074F0-08E8-419B-9AFA-AB603BDAE42B",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-85x850d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FADC4466-5D23-4116-9D8C-B7FB82D14342",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-85x855d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E3A6EB18-02E7-4873-9ACA-594E2B8EE2F5",
"vulnerable": false
},
{
"criteria": "cpe:2.3:h:sony:xbr-85x857d:-:*:*:*:*:*:*:*",
"matchCriteriaId": "1012B342-7794-4628-BC8D-92C7F1839110",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886."
},
{
"lang": "es",
"value": "Los dispositivos Sony Bravia Smart TV permiten a los atacantes remotos recuperar la contrase\u00f1a est\u00e1tica de Wi-Fi (utilizada cuando el televisor est\u00e1 funcionando como un punto de acceso) mediante el uso de la aplicaci\u00f3n Photo Sharing Plus para ejecutar un comando API tipo blackdoor, una vulnerabilidad diferente a la CVE-2019- 10886."
}
],
"id": "CVE-2019-11336",
"lastModified": "2024-11-21T04:20:54.450",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-05-14T14:29:00.227",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2019/Apr/32"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/108072"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
],
"url": "https://seclists.org/bugtraq/2019/Apr/34"
},
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
],
"url": "http://seclists.org/fulldisclosure/2019/Apr/32"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/108072"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Mailing List",
"Third Party Advisory"
],
"url": "https://seclists.org/bugtraq/2019/Apr/34"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-532"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…