What’s Vulnerable › Vulnerabilities

CVE-2020-36922: Sony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-06 · updated 2026-06-17
• Weakness: CWE-497

Description

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

Affected products

• Pro-Bravia Sony BRAVIA Digital Signage: through 1.7.8

References

• https://cxsecurity.com/issue/WLB-2020120028
• https://exchange.xforce.ibmcloud.com/vulnerabilities/192606
• https://packetstorm.news/files/id/160343
• https://pro-bravia.sony.net
• https://pro-bravia.sony.net/resources/software/bravia-signage/
• https://pro.sony/ue_US/products/display-software
• https://www.exploit-db.com/exploits/49187
• https://www.vulncheck.com/advisories/sony-bravia-digital-signage-unauthenticated-system-api-information-disclosure
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5610.php

Get alerted when CVE-2020-36922 or the next vulnerability affects your stack