The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Shell Metacharacter Injection.
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Link | Tags |
---|---|
https://www.sony.co.uk/electronics/support/articles/00201041 | patch vendor advisory |
https://fortiguard.com/zeroday/FG-VD-18-036 | third party advisory |