CVE-2020-36922

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

CVSS v4.0

6.9 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.57% chance of exploitation in the next 30 days, 45th percentile

Published

2026-01-06

Proof-of-concept exploits (3)

• https://www.exploit-db.com/exploits/49187
• https://packetstorm.news/files/id/160343
• https://cxsecurity.com/issue/WLB-2020120028

References

• CVE Record
• NVD entry

Related

• CVE-2020-36921
• CVE-2020-36923
• CVE-2020-36920
• CVE-2020-36924
• CVE-2020-36919
• CVE-2020-36925