CVE-2020-36922

6.9 mediumEPSS 0.6%

Medium (6.9) in sony bravia signage. EPSS 0.6% chance of exploitation in the next 30 days.

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-497
Published: 2026-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

sony:bravia_signage

References

https://cxsecurity.com/issue/WLB-2020120028
https://exchange.xforce.ibmcloud.com/vulnerabilities/192606
https://packetstorm.news/files/id/160343
https://pro-bravia.sony.net
https://pro-bravia.sony.net/resources/software/bravia-signage/

Check your stack JSON