Описание
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri= URI.
Ссылки
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
- ExploitThird Party AdvisoryVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:supra:stv-lc40lt0020f_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:supra:stv-lc40lt0020f:-:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.33135
Средний
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 5.5
github
больше 3 лет назад
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri= URI.
EPSS
Процентиль: 97%
0.33135
Средний
5.5 Medium
CVSS3
2.1 Low
CVSS2
Дефекты
CWE-22