CVE-2019-11336

Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password used when the TV is acting as an access point by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886...

CVE-2019-10886

CVE-2019-10886 affects Sony Bravia/Photo Sharing Plus in firmware prior to PKG6.5629. An incorrect access control allows reading arbitrary files over HTTP when the Photo Sharing Plus app is running, enabling directory listing (e.g., images) within the private network without authentication. Affec...