CVE:CVE-2018-16593
CNNVD:CNNVD-201906-771
Sony Bravia TV是日本索尼（Sony）公司的一款智能电视。Photo Sharing Plus是其中的一个图片共享组件。
Sony Bravia TV 8.587及之前版本中的Photo Sharing Plus组件存在命令操作系统命令注入漏洞。该漏洞源于外部输入数据构造可执行命令过程中，网络系统或产品未正确过滤其中的特殊元素。攻击者可利用该漏洞执行非法命令。
solution:Upgrade sony r5c_firmware to a higher version than 8.590,and avoid the version (,8.590); Upgrade sony wd75_firmware to a higher version than 8.216,and avoid the version (,8.216); Upgrade sony wd65_firmware to a higher version than 8.216,and avoid the version (,8.216); Upgrade sony xe70_firmware to a higher version than 8.764,and avoid the version (,8.764); Upgrade sony xf70_firmware to a higher version than 8.764,and avoid the version (,8.764); Upgrade sony we75_firmware to a higher version than 8.464,and avoid the version (,8.464); Upgrade sony we6_firmware to a higher version than 8.464,and avoid the version (,8.464); Upgrade sony wf6_firmware to a higher version than 8.464,and avoid the version (,8.464)