Medium severity6.1NVD Advisory· Published Jan 6, 2026· Updated Jun 17, 2026
CVE-2020-36924
CVE-2020-36924
Description
Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter. Attackers can exploit this vulnerability to hijack user sessions, execute cross-site scripting code, and modify display content by manipulating the input material type.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=1.7.8
- Range: 0
Patches
Vulnerability mechanics
References
9- packetstorm.news/files/id/160345nvdExploitThird Party Advisory
- www.exploit-db.com/exploits/49186nvdExploitThird Party AdvisoryVDB Entry
- www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5612.phpnvdExploitThird Party Advisory
- cxsecurity.com/issue/WLB-2020120030nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/192605nvdThird Party Advisory
- www.vulncheck.com/advisories/sony-bravia-digital-signage-unauthenticated-remote-file-inclusionnvdThird Party Advisory
- pro-bravia.sony.netnvdProduct
- pro-bravia.sony.net/resources/software/bravia-signage/nvdProduct
- pro.sony/ue_US/products/display-softwarenvdProduct
News mentions
0No linked articles in our index yet.