CVE-2019-10886 - CVE House
Back to Database
Status published Medium CVE-2019-10886

An incorrect access control exists in the Sony Photo Sharing...

Vulnerability Description

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version (for the X7500D TV and other applicable TVs). This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is running. This may allow an attacker to browse a particular directory (e.g. images) inside the private network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10886

Credits & Attribution

No credits recorded in the NVD database.

References

More from sony

View All →
CVE-2022-27094
Sony PlayMemories Home v6.0 contains an unquoted service path which...
Medium 6.7
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers...
Medium 5.9
CVE-2019-19364
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe...
High 7.8
CVE-2019-15744
The Sony Xperia Xperia XZs Android device with a build...
Low 3.3
CVE-2019-15743
The Sony Xperia Touch Android device with a build fingerprint...
Medium 5.5

Affected Vendor

Affected Software

photo sharing plus
Vulnerable Versions:
0

Timeline

Official Publish: April 19th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.