Sony BRAVIA Digital Signage 1.7.8 System API Information Disclosure  
Vendor: Sony Electronics Inc.  
Product web page:  
Affected version: <=1.7.8  
Summary: Sony's BRAVIA Signage is an application to deliver  
video and still images to Pro BRAVIAs and manage the information  
via a network. Features include management of displays, power  
schedule management, content playlists, scheduled delivery  
management, content interrupt, and more. This cost-effective  
digital signage management solution is ideal for presenting  
attractive, informative visual content in retail spaces and  
hotel reception areas, visitor attractions, educational and  
corporate environments.  
Desc: The application is vulnerable to sensitive information  
disclosure vulnerability. An unauthenticated attacker can  
visit several API endpoints and disclose information running  
on the device.  
Tested on: Microsoft Windows Server 2012 R2  
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic  
Advisory ID: ZSL-2020-5610  
Advisory URL:  
$ curl