Hisense VIDAA Smart TV firmware multiple unauthenticated access flaws
Anyone on the same network can control the smart TV and take its information.
Summary
Hisense VIDAA smart TV firmware has several flaws that allow access without login, so an attacker on the same LAN can control the screen and take stored information. Firmware V0000.01.00a.P0220 and older is affected.
Affected when
- Attacker on the same LAN
What to do
Check that the TV runs firmware newer than V0000.01.00a.P0220 and read the vendor's advisory. The sources name no fixed version.
Products and platforms
CVE IDs
Sources
- Write-up: vulncheck.com (opens in a new tab) · vulncheck.com (opens in a new tab) · vulncheck.com (opens in a new tab) · vulncheck.com (opens in a new tab) · vulncheck.com (opens in a new tab) · vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
- Repository: github.com (opens in a new tab)
Times
First published
First seen