{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2019-04-16T00:00:00", "descriptions": [{"lang": "en", "value": "An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-04-26T10:06:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20190423 Multiple vulnerabilities in Sony Smart TVs", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2019/Apr/32"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.sony.com/electronics/support/downloads/00016043"}, {"name": "20190424 Multiple vulnerabilities in Sony Smart TVs", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "https://seclists.org/bugtraq/2019/Apr/34"}, {"name": "108072", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/108072"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2019-10886", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20190423 Multiple vulnerabilities in Sony Smart TVs", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2019/Apr/32"}, {"name": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"}, {"name": "https://www.sony.com/electronics/support/downloads/00016043", "refsource": "CONFIRM", "url": "https://www.sony.com/electronics/support/downloads/00016043"}, {"name": "20190424 Multiple vulnerabilities in Sony Smart TVs", "refsource": "BUGTRAQ", "url": "https://seclists.org/bugtraq/2019/Apr/34"}, {"name": "108072", "refsource": "BID", "url": "http://www.securityfocus.com/bid/108072"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T22:40:14.926Z"}, "title": "CVE Program Container", "references": [{"name": "20190423 Multiple vulnerabilities in Sony Smart TVs", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2019/Apr/32"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.sony.com/electronics/support/downloads/00016043"}, {"name": "20190424 Multiple vulnerabilities in Sony Smart TVs", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "https://seclists.org/bugtraq/2019/Apr/34"}, {"name": "108072", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/108072"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2019-10886", "datePublished": "2019-04-19T17:51:49", "dateReserved": "2019-04-05T00:00:00", "dateUpdated": "2024-08-04T22:40:14.926Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sony:photo_sharing_plus:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E890A29-7E1E-435E-BFCB-16D090CC2C6F", "versionEndExcluding": "pkg6.5629", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:sony:kdl-50w800c:-:*:*:*:*:*:*:*", "matchCriteriaId": "959C70FF-13E9-4C3C-821F-CA128B68C58D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-50w805c:-:*:*:*:*:*:*:*", "matchCriteriaId": "4BB1ADDF-C47B-40FA-8CB6-8BDF3C7154FB", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-50w807c:-:*:*:*:*:*:*:*", "matchCriteriaId": "E70D3FC8-3CD8-4350-BA1A-3FFA1B7F4C94", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-50w809c:-:*:*:*:*:*:*:*", "matchCriteriaId": "329FC69F-C9DA-4B6D-AEDE-204B4BE06489", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-50w820c:-:*:*:*:*:*:*:*", "matchCriteriaId": "129D4803-25FA-4469-B132-69AF68E215C5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-55w800c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EF86EC7-A1DD-4F40-93EF-24E8120B99D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-55w805c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1ABE5A82-F389-4EB2-95B8-174E20CCCE76", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-65w850c:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC8C6F7-6EA1-4306-90AC-01D059D30261", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-65w855c:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC6BE05D-E4BD-45ED-8AE0-751533F2AACE", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-65w857c:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCE3EC16-5290-4B29-9777-30AE846E3FA1", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-75w850c:-:*:*:*:*:*:*:*", "matchCriteriaId": "991A64C7-2678-4042-BE08-39D7DBB1463D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:kdl-75w855c:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7564892-0034-4607-A040-82FC03EA3627", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:x7500d:-:*:*:*:*:*:*:*", "matchCriteriaId": "BC6A8615-0135-4AFB-8B77-A037AD2AD46C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-100z9d:-:*:*:*:*:*:*:*", "matchCriteriaId": "D5990CBB-481F-4DF6-959A-BE3140211C03", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-43x800d:-:*:*:*:*:*:*:*", "matchCriteriaId": "20A86592-20F7-44A8-ABA5-450E28E3FA9D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-43x800e:-:*:*:*:*:*:*:*", "matchCriteriaId": "888106F9-BE1D-4D67-B5BA-5932D4BA491F", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-43x830c:-:*:*:*:*:*:*:*", "matchCriteriaId": "C274F605-611D-45C6-9784-6C5D5C0B2A05", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x700d:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CC7240D-2CBE-4A36-B98A-637DF1907E75", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x800c:-:*:*:*:*:*:*:*", "matchCriteriaId": "ED21FC83-2A01-4F0F-9531-FFE1E777BF55", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x800d:-:*:*:*:*:*:*:*", "matchCriteriaId": "B681538E-A20B-47CE-A5DC-5E5DDF45CAE9", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x800e:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA6FBA71-E121-4785-92D3-CFD2954937EF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x830c:-:*:*:*:*:*:*:*", "matchCriteriaId": "F34B8D7C-D686-4F0F-9DC6-3CC842350CCC", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x835c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1AE62169-5642-4EBF-81FA-D01BD9B3499D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x835d:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D8646D2-D413-4D37-A6AA-041DB30A907A", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x837c:-:*:*:*:*:*:*:*", "matchCriteriaId": "89945794-49F2-4671-AA9F-A351BC3FB74D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x839c:-:*:*:*:*:*:*:*", "matchCriteriaId": "EAF45D42-8038-4701-A568-5AA0906651AE", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-49x900e:-:*:*:*:*:*:*:*", "matchCriteriaId": "89295430-CD3C-4159-8F94-95537ECF9E6D", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55a1e:-:*:*:*:*:*:*:*", "matchCriteriaId": "AB7D4810-E08C-4D57-857C-03B550DA4907", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x700d:-:*:*:*:*:*:*:*", "matchCriteriaId": "D772D325-C943-4B78-AA22-E20CB108C06C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x800e:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEDD932E-C844-48D3-BA58-EDBBD3858B4C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x805c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B94E0657-A28B-491D-9165-149FED2EBBBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x806e:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8C71281-E7D3-44BB-A9D9-951F0514401A", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x807c:-:*:*:*:*:*:*:*", "matchCriteriaId": "E1C53B56-0A54-480B-A267-D692C8B65169", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x809c:-:*:*:*:*:*:*:*", "matchCriteriaId": "7394B413-C9C1-476F-939C-20A2AE0568BF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x810c:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE714E89-CF3A-48F5-8D8D-DC6B91B5A93C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x850c:-:*:*:*:*:*:*:*", "matchCriteriaId": "506B28F7-E6B9-48CA-AA3C-3B2CCF750BA3", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x850d:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8036AF3-B0AA-49A8-BF17-5AAD05261049", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x855c:-:*:*:*:*:*:*:*", "matchCriteriaId": "76AE7635-D579-4031-A9FD-0F39C4D305AE", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x855d:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB46D9E0-E7B6-49EB-B3AD-2C79197ADDDF", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x857c:-:*:*:*:*:*:*:*", "matchCriteriaId": "B122639F-B902-4202-821E-A9C4318E4FD9", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x857d:-:*:*:*:*:*:*:*", "matchCriteriaId": "ADE01949-0DD1-4B37-8DB5-FDC2D6844602", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x900c:-:*:*:*:*:*:*:*", "matchCriteriaId": "904AA77A-C57F-4476-99F1-98B936BB1D2E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x900e:-:*:*:*:*:*:*:*", "matchCriteriaId": "8A6CC066-8512-4C02-A23C-C759317AC705", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x905c:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA3E9F10-5283-4EC4-BFA4-B9A3785A7F22", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x907c:-:*:*:*:*:*:*:*", "matchCriteriaId": "62B6DAA1-7494-4063-880A-EB14B8FD3150", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x930d:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA8C3782-8A2E-4268-8AD3-4B3B8C83CBE2", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-55x930e:-:*:*:*:*:*:*:*", "matchCriteriaId": "183D906C-04F1-424B-9AF7-FECACD7298AE", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65a1e:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D44273A-8947-4E3C-850C-C8908104EFF5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x750d:-:*:*:*:*:*:*:*", "matchCriteriaId": "BABC9F21-1B70-405F-B173-C9426FB559B5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x800c:-:*:*:*:*:*:*:*", "matchCriteriaId": "A466EEAD-33B8-4CDC-9A9D-11FA55A970C0", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x805c:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC477911-6CDA-4CA2-9AB6-CD5FF81AAA61", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x807c:-:*:*:*:*:*:*:*", "matchCriteriaId": "C39CFFCC-48C2-4B5C-A202-59D429BB810C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x809c:-:*:*:*:*:*:*:*", "matchCriteriaId": "7A2037C6-694E-4263-AFBA-34396187E8F5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x810c:-:*:*:*:*:*:*:*", "matchCriteriaId": "06136D31-E072-4B2C-B08C-74BF9681286C", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x850c:-:*:*:*:*:*:*:*", "matchCriteriaId": "E552BE39-E1C2-46CB-9827-06239FF93B49", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x850d:-:*:*:*:*:*:*:*", "matchCriteriaId": "190B3867-0B4A-4A70-9F55-3547727B0173", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x850e:-:*:*:*:*:*:*:*", "matchCriteriaId": "47F99A12-A4F6-4A7B-9B7E-C972F7A077F8", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x855c:-:*:*:*:*:*:*:*", "matchCriteriaId": "39E71E6E-9C5C-403D-B53A-535A63DD7F51", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x855d:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA0853B8-7839-4954-97BC-F79EF61FA5C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x857c:-:*:*:*:*:*:*:*", "matchCriteriaId": "2478A1DF-B9AB-426D-B426-47479DFF93E9", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x857d:-:*:*:*:*:*:*:*", "matchCriteriaId": "2AADF6EC-9A78-479C-AF94-1CA78C569280", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x900c:-:*:*:*:*:*:*:*", "matchCriteriaId": "6140C1CE-71C1-465F-AB1F-863AF72A9732", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x900e:-:*:*:*:*:*:*:*", "matchCriteriaId": "345BF296-998D-4BA6-A64C-B7CDCD0D46C0", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x905c:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5509F41-EB00-4328-866F-0D53307986F0", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x907c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1CBA4A87-F0B8-4364-A8B3-777E980F51CA", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x930c:-:*:*:*:*:*:*:*", "matchCriteriaId": "8368777D-D15E-4680-B586-5DEE797E6833", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x930d:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B39FC21-0E35-4121-9390-9E979F5FE269", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x930e:-:*:*:*:*:*:*:*", "matchCriteriaId": "C24A44F1-32A6-4D9C-8754-1BCDD51679FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x935d:-:*:*:*:*:*:*:*", "matchCriteriaId": "97990738-1441-42ED-AA09-1FAFDE0E5FA5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65x937d:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC2240A3-7BCF-49D7-9B44-C0EDFCFD382F", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-65z9d:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD02259D-E003-4AFB-A637-CE11174BF726", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x850c:-:*:*:*:*:*:*:*", "matchCriteriaId": "34EDC3E7-334D-499C-9CD5-350BBDBCA592", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x850d:-:*:*:*:*:*:*:*", "matchCriteriaId": "37B11B1B-B3A3-499B-A9E3-CD63313A168E", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x850e:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F2CDAD9-716B-4925-BD07-2E1BFAFE1C21", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x855c:-:*:*:*:*:*:*:*", "matchCriteriaId": "25EB300A-F947-49BF-AFC0-5284F525FA73", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x855d:-:*:*:*:*:*:*:*", "matchCriteriaId": "30E8D96E-6D2C-4400-81BE-0FA9CF819C75", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x857d:-:*:*:*:*:*:*:*", "matchCriteriaId": "024725D1-9A32-4AE9-94CC-92FAFA1D16FE", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x900e:-:*:*:*:*:*:*:*", "matchCriteriaId": "D678D49B-F943-440E-AAFD-7940D8EED08B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x910c:-:*:*:*:*:*:*:*", "matchCriteriaId": "E7EFB32A-6C1D-4FE2-BC5C-4161615F6AB3", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x940c:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AD055B9-449D-4333-A088-7709AB2021C5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x940d:-:*:*:*:*:*:*:*", "matchCriteriaId": "67B04B6A-EBFE-418C-AD87-FC8C3B3D9717", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x940e:-:*:*:*:*:*:*:*", "matchCriteriaId": "B17CD634-C1E5-487F-BC84-9D0029A0BE86", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75x945c:-:*:*:*:*:*:*:*", "matchCriteriaId": "33D45F12-708B-48E5-8A55-0E8D192D7A46", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-75z9d:-:*:*:*:*:*:*:*", "matchCriteriaId": "B227766B-D36A-4E14-9846-2ED1DF137661", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-77a1e:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9A074F0-08E8-419B-9AFA-AB603BDAE42B", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-85x850d:-:*:*:*:*:*:*:*", "matchCriteriaId": "FADC4466-5D23-4116-9D8C-B7FB82D14342", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-85x855d:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3A6EB18-02E7-4873-9ACA-594E2B8EE2F5", "vulnerable": false}, {"criteria": "cpe:2.3:h:sony:xbr-85x857d:-:*:*:*:*:*:*:*", "matchCriteriaId": "1012B342-7794-4628-BC8D-92C7F1839110", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network."}, {"lang": "es", "value": "Un control de acceso incorrecto en la aplicaci\u00f3n Photo Sharing Plus de Sony en versiones de firmware anteriores (para televisores X7500D y otras posibles televisiones). Esta vulnerabilidad permite a un atacante sin autenticaci\u00f3n leer archivos arbitrarios cuando la aplicaci\u00f3n Photo Sharing Plus se est\u00e1 ejecutando. Esto podr\u00eda permitir a un atacante buscar un directorio en determinado dentro de la red privada (por ejemplo im\u00e1genes) ."}], "id": "CVE-2019-10886", "lastModified": "2024-11-21T04:20:03.150", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-04-19T18:29:00.747", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"}, {"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2019/Apr/32"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/108072"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "https://seclists.org/bugtraq/2019/Apr/34"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "https://www.sony.com/electronics/support/downloads/00016043"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2019/Apr/32"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/108072"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "url": "https://seclists.org/bugtraq/2019/Apr/34"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "https://www.sony.com/electronics/support/downloads/00016043"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}