Sony Photo Sharing Plus vulnerabilities

2 CVEs affecting Sony Photo Sharing Plus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11336, published 2019-05-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11336, published 2019-05-14. High severity, CVSS 8.1. EPSS: 3.2% chance of exploitation in the next 30 days. Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a…
CVE-2019-10886, published 2019-04-19. Medium severity, CVSS 5.9. EPSS: 3% chance of exploitation in the next 30 days. An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an…