CVE-2018-16593

Published: Jun 19, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.

Affected (8)

Products: Sony: R5c Firmware, Wd75 Firmware, Wd65 Firmware, Xe70 Firmware, Xf70 Firmware, We75 Firmware, We6 Firmware, Wf6 Firmware

8 products

Configuration A

1 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Sony R5c Firmware	Before 8.590

Running on/with	Platform Versions
Sony Kdl 32r500c	All versions
Sony Kdl 32r503c	All versions
Sony Kdl 32r505c	All versions
Sony Kdl 40r550c	All versions
Sony Kdl 40r553c	All versions
Sony Kdl 40r555c	All versions
Sony Kdl 48r550c	All versions
Sony Kdl 48r553c	All versions
Sony Kdl 48r555c	All versions

Configuration B

1 vulnerable · 30 platform

Vulnerable Software	Affected Versions
Sony Wd75 Firmware	Before 8.216

Running on/with	Platform Versions
Sony Kdl 32wd750	All versions
Sony Kdl 32wd751	All versions
Sony Kdl 32wd752	All versions
Sony Kdl 32wd753	All versions
Sony Kdl 32wd754	All versions
Sony Kdl 32wd755	All versions
Sony Kdl 32wd756	All versions
Sony Kdl 32wd757	All versions
Sony Kdl 32wd758	All versions
Sony Kdl 32wd759	All versions
Sony Kdl 43wd750	All versions
Sony Kdl 43wd751	All versions
Sony Kdl 43wd752	All versions
Sony Kdl 43wd753	All versions
Sony Kdl 43wd754	All versions
Sony Kdl 43wd755	All versions
Sony Kdl 43wd756	All versions
Sony Kdl 43wd757	All versions
Sony Kdl 43wd758	All versions
Sony Kdl 43wd759	All versions
Sony Kdl 49wd750	All versions
Sony Kdl 49wd751	All versions
Sony Kdl 49wd752	All versions
Sony Kdl 49wd753	All versions
Sony Kdl 49wd754	All versions
Sony Kdl 49wd755	All versions
Sony Kdl 49wd756	All versions
Sony Kdl 49wd757	All versions
Sony Kdl 49wd758	All versions
Sony Kdl 49wd759	All versions

Configuration C

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Sony Wd65 Firmware	Before 8.216

Running on/with	Platform Versions
Sony Kdl 40wd650	All versions
Sony Kdl 40wd653	All versions
Sony Kdl 40wd655	All versions
Sony Kdl 48wd650	All versions
Sony Kdl 48wd653	All versions
Sony Kdl 48wd655	All versions

Configuration D

1 vulnerable · 33 platform

Vulnerable Software	Affected Versions
Sony Xe70 Firmware	Before 8.764

Running on/with	Platform Versions
Sony Kd 43xe7000	All versions
Sony Kd 43xe7002	All versions
Sony Kd 43xe7003	All versions
Sony Kd 43xe7004	All versions
Sony Kd 43xe7005	All versions
Sony Kd 43xe7073	All versions
Sony Kd 43xe7077	All versions
Sony Kd 43xe7093	All versions
Sony Kd 43xe7096	All versions
Sony Kd 49xe7000	All versions
Sony Kd 49xe7002	All versions
Sony Kd 49xe7003	All versions
Sony Kd 49xe7004	All versions
Sony Kd 49xe7005	All versions
Sony Kd 49xe7073	All versions
Sony Kd 49xe7077	All versions
Sony Kd 49xe7093	All versions
Sony Kd 49xe7096	All versions
Sony Kd 55xe7000	All versions
Sony Kd 55xe7002	All versions
Sony Kd 55xe7003	All versions
Sony Kd 55xe7004	All versions
Sony Kd 55xe7005	All versions
Sony Kd 55xe7073	All versions
Sony Kd 55xe7077	All versions
Sony Kd 55xe7093	All versions
Sony Kd 55xe7096	All versions
Sony Kd 65xe7002	All versions
Sony Kd 65xe7003	All versions
Sony Kd 65xe7004	All versions
Sony Kd 65xe7005	All versions
Sony Kd 65xe7093	All versions
Sony Kd 65xe7096	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sony Xf70 Firmware	Before 8.764

Running on/with	Platform Versions
Sony Xf70	All versions

Configuration F

1 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Sony We75 Firmware	Before 8.464

Running on/with	Platform Versions
Sony Kdl 43we750	All versions
Sony Kdl 43we753	All versions
Sony Kdl 43we754	All versions
Sony Kdl 43we755	All versions
Sony Kdl 49we750	All versions
Sony Kdl 49we753	All versions
Sony Kdl 49we754	All versions
Sony Kdl 49we755	All versions

Configuration G

1 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Sony We6 Firmware	Before 8.464

Running on/with	Platform Versions
Sony Kdl 32we610	All versions
Sony Kdl 32we613	All versions
Sony Kdl 32we615	All versions
Sony Kdl 40we660	All versions
Sony Kdl 40we663	All versions
Sony Kdl 40we665	All versions
Sony Kdl 49we660	All versions
Sony Kdl 49we663	All versions
Sony Kdl 49we665	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sony Wf6 Firmware	Before 8.464

Running on/with	Platform Versions
Sony Wf6	All versions

Related CWEs

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (4)

https://fortiguard.com/zeroday/FG-VD-18-036

Source: cve@mitre.org

Third Party Advisory

https://www.sony.co.uk/electronics/support/articles/00201041

Source: cve@mitre.org

PatchVendor Advisory

https://fortiguard.com/zeroday/FG-VD-18-036

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.sony.co.uk/electronics/support/articles/00201041

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.