VAR-201907-1335
Vulnerability from variot - Updated: 2024-11-23 22:33Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV. Sony Bravia Smart TV The device contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Sony BRAVIA Smart TVs is a smart TV from Sony Corporation in Japan.
There are security holes in Sony BRAVIA Smart TVs. ## ADVISORY INFORMATION
TITLE: Two vulnerabilities found in Sony BRAVIA Smart TVs ADVISORY URL: CVE-2019-11889 https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/ CVE-2019-11890 https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/
DATE PUBLISHED: 02/07/2019 AFFECTED VENDORS: Sony RELEASE MODE: Coordinated release CVE: CVE-2019-11889, CVE-2019-11890 CVSSv3 for CVE-2019-11889: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv3 for CVE-2019-11890: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
PRODUCT DESCRIPTION
BRAVIA is a brand of Sony Visual Products known as Smart TVs. These Smart TVs are known to be high standard products.
DETAILS OF VULNERABILITIES
xen1thLabs has found two vulnerabilities in Sony products and coordinated the disclosure of these security flaws with Sony. The list of affected models has not been shared by Sony.
The summary of the vulnerabilities is:
-
CVE-2019-11889 Sony Remote Denial-of-Service Triggered Over HbbTV Vulnerability: This vulnerability allows an attacker to remotely crash the HbbTV rendering engine and block the TV
-
CVE-2019-11890 Sony Remote Denial-of-Service Over Wifi / LAN / Internet Vulnerability: This vulnerability allows an attacker to remotely crash the Smart TV using TCP packets.
1. (please see the presentation at HiTB Dubai 2018 for HbbTV description
https://conference.hitb.org/hitbsecconf2018dxb/sessions/hacking-into-broadband-and-broadcast-tv-systems/),
The remote control does not appear to work except the PROG+ and PROG- buttons. Only changing channels allows to 'un-freeze' the television. Android is supposed to kill blocked applications.
In order to reproduce the behavior, start by generating a webpage using:
dd if=/dev/zero of=index.html bs=1M count=2048
````
Using the software-defined radio, send a DVB-T signal containing a HbbTV application that force
the targeted Smart TV to load a file from a controlled server. By forcing the Smart TV to load
the generated file, it can be observed from the logs, only between 180KB and 250KB are served
before the HbbTV application freezes:
vaccess.log:127.0.1.1:80 192.168.1.191 - - [01/Apr/2019:06:40:54 -0400] "GET /hbbtvtest/test3/ HTTP/1.1" 200 178647 "http://x.test/hbbtvtest/index.php" "Mozilla/5.0 (Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.152 Safari/537.36 OPR/29.0.1803.0 OMI/4.5.23.37.ALSAN5.131 HbbTV/1.2.1 (; Sony; KD-65X7500D; v1.000000000; 2016;) sony.hbbtv.tv.2016HE"
```
vaccess.log.1:127.0.1.1:80 192.168.1.191 - - [01/Apr/2019:02:36:16 -0400] "GET /hbbtvtest/test3/ HTTP/1.1"
200 170543 "http://x.test/hbbtvtest/index.php" "Mozilla/5.0 (Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/42.0.2311.152 Safari/537.36 OPR/29.0.1803.0 OMI/4.5.23.37.ALSAN5.131 HbbTV/1.2.1 (; Sony; KD-65X7500D; v1.000000000; 2016;)
sony.hbbtv.tv.2016HE"
Sony investigated the issue and shared the following analysis: "MITM attack by http connection is caused by the specification of the HbbTV service".
2. CVE-2019-11890 Sony Remote Denial-of-Service Over Wifi / LAN / Internet Vulnerability
An unauthenticated remote attacker can synflood the Smart TV over LAN and Wi-Fi, the smart television freezes and becomes irresponsive, some programs crash and the television reboots randomly. No PoC is released due to low complexity level of exploitation as Sony is not planning to release a security patch.
Sony investigated the issue and shared the following analysis: "The Sony Product teams have conducted additional research regarding the submission and identified the following: CVE-2019-1189: DoS over WiFi /LAN - This is due to the performance of the interrupt operation in the Linux driver".
SOLUTION
Sony provided the following recommendation: "Sony's manual instructs users to: Make sure to connect to the Internet or home network via a router, which will minimize this risk. In addition, these two symptoms can be recovered by unplugging the power supply cable. The TV cannot be broken and there is no internal data that can be stolen by these actions." (May 30th, 2019).
And informed xen1thLabs that: "we will not be releasing any notifications." (June 19th, 2019).
DISCLOSURE TIMELINE
01/04/2019 - Vulnerabilities have been found by xen1thLabs 28/04/2019 - xen1thLabs send the report to Sony through their HackerOne Bug bounty program 02/05/2019 - Updates requested from xen1thLabs through HackerOne 10/05/2019 - Vulnerabilities have been confirmed by Sony through HackerOne 14/05/2019 - xen1thLabs requests a CVE from MITRE 30/05/2019 - Sony inform xen1thLabs of the solutions recommended for users through HackerOne 30/05/2019 - xen1thLabs request the confirmation from Sony that no security patches will be provided through HackerOne 07/06/2019 - Sony informs the following "Due to the evaluation conducted by our product team we will be closing out this ticket" through HackerOne 26/06/2019 - Public disclosure
CREDITS
xen1thLabs - Telecom Lab
REFERENCES
CVE-2019-11889 https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/
CVE-2019-11890 https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/
Sony will not publish any security advisory nor release any security patch.
ABOUT xen1thLabs
xen1thLabs conducts vulnerability research, which feeds in the testing and validation activities it conducts across software, hardware and telecommunication.
xen1thLabs houses a team of world-class experts dedicated to providing high impact capabilities in cyber security.
At xen1thLabs we are committed to uncovering new vulnerabilities that combat tomorrow's threats today.
More information about xen1thLabs can be found at: https://www.darkmatter.ae/xen1thlabs/
WORKING AT xen1thLabs
xen1thLabs is looking for several security researchers across multiple disciplines. Join a great team of likeminded specialists and enjoy all that UAE has to offer!
If you are interested please visit: https://www.darkmatter.ae/xen1thlabs/
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201907-1335",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "bravia",
"scope": "eq",
"trust": 1.0,
"vendor": "sony",
"version": null
},
{
"model": "bravia",
"scope": null,
"trust": 0.8,
"vendor": "sony",
"version": null
},
{
"model": "bravia smart tvs",
"scope": null,
"trust": 0.6,
"vendor": "sony",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:sony:bravia_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xen1thLabs",
"sources": [
{
"db": "PACKETSTORM",
"id": "153547"
},
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
}
],
"trust": 0.7
},
"cve": "CVE-2019-11889",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-11889",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2019-42535",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-143580",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2019-11889",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-11889",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-11889",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2019-42535",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201907-376",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-143580",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "VULHUB",
"id": "VHN-143580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
},
{
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sony BRAVIA Smart TV devices allow remote attackers to cause a denial of service (device hang) via a crafted web page over HbbTV. Sony Bravia Smart TV The device contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Sony BRAVIA Smart TVs is a smart TV from Sony Corporation in Japan. \n\nThere are security holes in Sony BRAVIA Smart TVs. ## ADVISORY INFORMATION\n\nTITLE: Two vulnerabilities found in Sony BRAVIA Smart TVs\nADVISORY URL:\n\tCVE-2019-11889\n\thttps://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/\n\tCVE-2019-11890\n\thttps://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/\n\nDATE PUBLISHED: 02/07/2019\nAFFECTED VENDORS: Sony\nRELEASE MODE: Coordinated release\nCVE: CVE-2019-11889, CVE-2019-11890\nCVSSv3 for CVE-2019-11889: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\nCVSSv3 for CVE-2019-11890: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\n## PRODUCT DESCRIPTION\nBRAVIA is a brand of Sony Visual Products known as Smart TVs. \nThese Smart TVs are known to be high standard products. \n\n\n## DETAILS OF VULNERABILITIES\nxen1thLabs has found two vulnerabilities in Sony products and coordinated \nthe disclosure of these security flaws with Sony. The list of affected models has not been shared by Sony. \n\nThe summary of the vulnerabilities is:\n\n- CVE-2019-11889 Sony Remote Denial-of-Service Triggered Over HbbTV \nVulnerability:\nThis vulnerability allows an attacker to remotely crash the HbbTV rendering \nengine and block the TV\n\n- CVE-2019-11890 Sony Remote Denial-of-Service Over Wifi / LAN / Internet\nVulnerability:\nThis vulnerability allows an attacker to remotely crash the Smart TV using\nTCP packets. \n\n### 1. (please see the presentation at HiTB Dubai 2018 for HbbTV description \nhttps://conference.hitb.org/hitbsecconf2018dxb/sessions/hacking-into-broadband-and-broadcast-tv-systems/), \n\nThe remote control does not appear to work except the PROG+ and PROG- buttons. \nOnly changing channels allows to \u0027un-freeze\u0027 the television. Android is supposed \nto kill blocked applications. \n\nIn order to reproduce the behavior, start by generating a webpage using: \n\n```\ndd if=/dev/zero of=index.html bs=1M count=2048\n````\n\nUsing the software-defined radio, send a DVB-T signal containing a HbbTV application that force \nthe targeted Smart TV to load a file from a controlled server. By forcing the Smart TV to load \nthe generated file, it can be observed from the logs, only between 180KB and 250KB are served \nbefore the HbbTV application freezes:\n\n```\nvaccess.log:127.0.1.1:80 192.168.1.191 - - [01/Apr/2019:06:40:54 -0400] \"GET /hbbtvtest/test3/ HTTP/1.1\" \n200 178647 \"http://x.test/hbbtvtest/index.php\" \"Mozilla/5.0 (Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) \nChrome/42.0.2311.152 Safari/537.36 OPR/29.0.1803.0 OMI/4.5.23.37.ALSAN5.131 HbbTV/1.2.1 (; Sony; KD-65X7500D; v1.000000000; 2016;) \nsony.hbbtv.tv.2016HE\"\n````\n\n```\nvaccess.log.1:127.0.1.1:80 192.168.1.191 - - [01/Apr/2019:02:36:16 -0400] \"GET /hbbtvtest/test3/ HTTP/1.1\" \n200 170543 \"http://x.test/hbbtvtest/index.php\" \"Mozilla/5.0 (Linux armv7l) AppleWebKit/537.36 (KHTML, like Gecko) \nChrome/42.0.2311.152 Safari/537.36 OPR/29.0.1803.0 OMI/4.5.23.37.ALSAN5.131 HbbTV/1.2.1 (; Sony; KD-65X7500D; v1.000000000; 2016;) \nsony.hbbtv.tv.2016HE\"\n````\nSony investigated the issue and shared the following analysis:\n\"MITM attack by http connection is caused by the specification of the HbbTV service\". \n\n### 2. CVE-2019-11890 Sony Remote Denial-of-Service Over Wifi / LAN / Internet Vulnerability\n\nAn unauthenticated remote attacker can synflood the Smart TV over LAN and Wi-Fi, the smart \ntelevision freezes and becomes irresponsive, some programs crash and the television reboots \nrandomly. No PoC is released due to low complexity level of exploitation as Sony is not \nplanning to release a security patch. \n\nSony investigated the issue and shared the following analysis:\n\"The Sony Product teams have conducted additional research regarding the submission and \nidentified the following: CVE-2019-1189: DoS over WiFi /LAN - This is due to the performance \nof the interrupt operation in the Linux driver\". \n\n## SOLUTION\nSony provided the following recommendation:\n\"Sony\u0027s manual instructs users to: Make sure to connect to the Internet or home network \nvia a router, which will minimize this risk. In addition, these two symptoms can be \nrecovered by unplugging the power supply cable. The TV cannot be broken and there is no \ninternal data that can be stolen by these actions.\" (May 30th, 2019). \n\nAnd informed xen1thLabs that:\n\"we will not be releasing any notifications.\" (June 19th, 2019). \n\n## DISCLOSURE TIMELINE\n01/04/2019 - Vulnerabilities have been found by xen1thLabs\n28/04/2019 - xen1thLabs send the report to Sony through their HackerOne Bug bounty program\n02/05/2019 - Updates requested from xen1thLabs through HackerOne\n10/05/2019 - Vulnerabilities have been confirmed by Sony through HackerOne\n14/05/2019 - xen1thLabs requests a CVE from MITRE\n30/05/2019 - Sony inform xen1thLabs of the solutions recommended for users through HackerOne\n30/05/2019 - xen1thLabs request the confirmation from Sony that no security patches will be provided through HackerOne\n07/06/2019 - Sony informs the following \"Due to the evaluation conducted by our product team we will be closing out this ticket\" through HackerOne\n26/06/2019 - Public disclosure\n\n## CREDITS\nxen1thLabs - Telecom Lab\n\n## REFERENCES\n\nCVE-2019-11889\nhttps://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/\n\nCVE-2019-11890\nhttps://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/\n\nSony will not publish any security advisory nor release any security patch. \n\n## ABOUT xen1thLabs\nxen1thLabs conducts vulnerability research, which feeds in the testing and\nvalidation activities it conducts across software, hardware and\ntelecommunication. \n\nxen1thLabs houses a team of world-class experts dedicated to providing\nhigh impact capabilities in cyber security. \n\nAt xen1thLabs we are committed to uncovering new vulnerabilities that combat\ntomorrow\u0027s threats today. \n\nMore information about xen1thLabs can be found at:\nhttps://www.darkmatter.ae/xen1thlabs/\n\n\n## WORKING AT xen1thLabs\nxen1thLabs is looking for several security researchers across multiple disciplines. \nJoin a great team of likeminded specialists and enjoy all that UAE has to offer!\n\nIf you are interested please visit:\nhttps://www.darkmatter.ae/xen1thlabs/\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-11889"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "VULHUB",
"id": "VHN-143580"
},
{
"db": "PACKETSTORM",
"id": "153547"
}
],
"trust": 2.34
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-143580",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-143580"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-11889",
"trust": 3.2
},
{
"db": "PACKETSTORM",
"id": "153547",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201907-376",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2019-42535",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-143580",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "VULHUB",
"id": "VHN-143580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "PACKETSTORM",
"id": "153547"
},
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
},
{
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"id": "VAR-201907-1335",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "VULHUB",
"id": "VHN-143580"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
}
]
},
"last_update_date": "2024-11-23T22:33:49.134000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "BRAVIA",
"trust": 0.8,
"url": "https://www.sony.jp/bravia/"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-20",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-143580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-triggered-over-vulnerability-hbbtv-xl-19-014/"
},
{
"trust": 2.3,
"url": "http://packetstormsecurity.com/files/153547/sony-bravia-smart-tv-denial-of-service.html"
},
{
"trust": 2.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11889"
},
{
"trust": 1.7,
"url": "http://seclists.org/fulldisclosure/2019/jul/8"
},
{
"trust": 1.7,
"url": "https://www.first.org/members/teams/sony_psirt"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-11889"
},
{
"trust": 0.1,
"url": "https://www.darkmatter.ae/xen1thlabs/sony-remote-denial-of-service-over-wifi-lan-internet-vulnerability-xl-19-013/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-11890"
},
{
"trust": 0.1,
"url": "http://x.test/hbbtvtest/index.php\""
},
{
"trust": 0.1,
"url": "https://www.darkmatter.ae/xen1thlabs/"
},
{
"trust": 0.1,
"url": "https://conference.hitb.org/hitbsecconf2018dxb/sessions/hacking-into-broadband-and-broadcast-tv-systems/),"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "VULHUB",
"id": "VHN-143580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "PACKETSTORM",
"id": "153547"
},
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
},
{
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"db": "VULHUB",
"id": "VHN-143580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"db": "PACKETSTORM",
"id": "153547"
},
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
},
{
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-11-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"date": "2019-07-09T00:00:00",
"db": "VULHUB",
"id": "VHN-143580"
},
{
"date": "2019-07-17T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"date": "2019-07-08T21:05:30",
"db": "PACKETSTORM",
"id": "153547"
},
{
"date": "2019-07-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201907-376"
},
{
"date": "2019-07-09T13:15:12.103000",
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-11-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2019-42535"
},
{
"date": "2020-08-24T00:00:00",
"db": "VULHUB",
"id": "VHN-143580"
},
{
"date": "2019-07-17T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-006257"
},
{
"date": "2020-08-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201907-376"
},
{
"date": "2024-11-21T04:21:57.860000",
"db": "NVD",
"id": "CVE-2019-11889"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Sony Bravia Smart TV Vulnerability related to input validation on devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-006257"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201907-376"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…