PT-2026-1456 · Sony Electronics+1 · Sony Bravia Digital Signage+1

Published 2026-01-06 · Updated 2026-01-06 · CVE-2020-36923

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Sony BRAVIA Digital Signage version 1.7.8

Description An insecure direct object reference allows attackers to bypass authorization controls. By manipulating client-side access restrictions, attackers can access hidden system resources such as the '/#/content-creation' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2020-36923

Affected Products

Sony Bravia Digital Signage

Bravia Signage

References · 11

• 🔥 https://packetstormsecurity.com/files/160344 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5611.php · Exploit
• 🔥 https://zeroscience.mk/codes/sonybravia_idor.txt · Exploit
• https://osv.dev/vulnerability/CVE-2020-36923 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36923 · Security Note
• https://pro.sony/ue_US/products/display-software · Note
• https://cxsecurity.com/issue/WLB-2020120031 · Note
• https://pro-bravia.sony.net · Note
• https://vulncheck.com/advisories/sony-bravia-digital-signage-client-side-protection-bypass-via-idor · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/192607 · Note
• https://pro-bravia.sony.net/resources/software/bravia-signage · Note