CVE-2020-36922: pro-bravia sony bravia digital signage

Vulnerability summary

CVE-2020-36922 is a high (CVSS 7.5) vulnerability in pro-bravia sony bravia digital signage. EPSS estimates a 0.64% chance of exploitation in the next 30 days, higher than 49.7% of scored vulnerabilities. 4 public exploits are recorded.

Timeline

1. 06-01-2026
   PublishedVulnerability first disclosed.
2. 06-01-2026
   Last modifiedVulnerability information updated.

Description

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

• CWE-497Exposure of Sensitive System Information to an Unauthorized Control SphereThe product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.