EUVD-2018-5921

Malware in sbrugna...

Grundig Smart Inter@ctive TV Cross-Site Request Forgery Vulnerability

Grundig Smart Inter@ctive TV is a television device. A cross-site request forgery vulnerability exists in Grundig Smart Inter@ctive TV version 3.0. A remote attacker can exploit this vulnerability by sending a POST request with an ID value to TCP port 8085 to access the TV desktop and perform...

Cross site request forgery (csrf)

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...