High severity8.1NVD Advisory· Published May 14, 2019· Updated Jun 17, 2026

CVE-2019-11336

Description

Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) by using the Photo Sharing Plus application to execute a backdoor API command, a different vulnerability than CVE-2019-10886.

Affected products

Sony/Photo Sharing Plus
cpe:2.3:a:sony:photo_sharing_plus:*:*:*:*:*:*:*:*
Range: <pkg6.5629
Sony/Bravia Smart TVdescription
Sony/Bravia Tvllm-fuzzy

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/152612/Sony-Smart-TV-Information-Disclosure-File-Read.htmlnvdExploitThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2019/Apr/32nvdExploitMailing ListThird Party Advisory
seclists.org/bugtraq/2019/Apr/34nvdExploitMailing ListThird Party Advisory
www.darkmatter.ae/xen1thlabs/sony-smart-tv-photo-sharing-plus-information-disclosure-vulnerability-xl-19-003/nvdExploitThird Party Advisory
www.securityfocus.com/bid/108072nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000