CVE:CVE-2018-16594
CNNVD:CNNVD-201906-774
Sony Bravia TV是日本索尼（Sony）公司的一款智能电视。Photo Sharing Plus是其中的一个图片共享组件。
Sony Bravia TV 8.587及之前版本中的Photo Sharing Plus组件存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade sony r5c_firmware to a higher version than 8.590,and avoid the version (,8.590); Upgrade sony wd75_firmware to a higher version than 8.216,and avoid the version (,8.216); Upgrade sony wd65_firmware to a higher version than 8.216,and avoid the version (,8.216); Upgrade sony xe70_firmware to a higher version than 8.764,and avoid the version (,8.764); Upgrade sony xf70_firmware to a higher version than 8.764,and avoid the version (,8.764); Upgrade sony we75_firmware to a higher version than 8.464,and avoid the version (,8.464); Upgrade sony we6_firmware to a higher version than 8.464,and avoid the version (,8.464); Upgrade sony wf6_firmware to a higher version than 8.464,and avoid the version (,8.464)