Critical severity9.8NVD Advisory· Published Jan 6, 2026· Updated Jun 17, 2026
CVE-2020-36923
CVE-2020-36923
Description
Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls. Attackers can access hidden system resources like '/#/content-creation' by manipulating client-side access restrictions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Sony Electronics Inc./Sony BRAVIA Digital Signagev5Range: <=1.7.8
- Range: <=1.7.8
Patches
Vulnerability mechanics
References
9- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5611.phpnvdExploitThird Party Advisory
- cxsecurity.com/issue/WLB-2020120031nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/192607nvdThird Party Advisory
- packetstormsecurity.com/files/160344nvdThird Party Advisory
- www.vulncheck.com/advisories/sony-bravia-digital-signage-client-side-protection-bypass-via-idornvdThird Party Advisory
- www.zeroscience.mk/codes/sonybravia_idor.txtnvdThird Party Advisory
- pro-bravia.sony.netnvdProduct
- pro-bravia.sony.net/resources/software/bravia-signage/nvdProduct
- pro.sony/ue_US/products/display-softwarenvdProduct
News mentions
0No linked articles in our index yet.