CVE-2021-27942

2021-08-0317:09:52

mitre

www.cve.org

vizio smart tv

usb drive

code execution

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.1%

JSON

Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.

References

www.l9group.com/advisories/vizio-tv-code-execution-from-a-usb-drive