CVE-2019-10886

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable…

published April 19, 2019

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02968 · 87.1th percentile
Published
2019-04-19T17:51Z
EPSS history
Timeline
  • 19 APR 17:51Z
    An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable…
    cvelistv5