Bravia Signage
Approved changes feed: RSS · Atom
cpe:2.3:a:sony:bravia_signage:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sony (a3305fa3-6816-56a8-87d4-e59d21594771) |
|---|---|
| Product | Bravia Signage (06e84ed0-f052-56c9-8f02-8e94cff731e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36924 |
vulnerable | 2026-06-08 05:25:49.858108 |
Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion
MEDIUM (6.1)
Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter. Attackers can exploit this vulnerability to hijack user sessions, execute cross-site scripting code, and modify display content by manipulating the input material type.
Published: 2026-01-06T15:52:28.074Z
Updated: 2026-01-26T15:55:01.315Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36923 |
vulnerable | 2026-06-08 05:25:49.857496 |
Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR
CRITICAL (9.8)
Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.
Published: 2026-01-06T15:52:27.572Z
Updated: 2026-01-06T18:56:11.847Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36922 |
vulnerable | 2026-06-08 05:25:49.856493 |
Sony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure
HIGH (7.5)
Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.
Published: 2026-01-06T15:52:27.136Z
Updated: 2026-01-06T18:24:00.626Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.