EUVD-2018-5921

Malware in sbrugna...

Grundig Smart Inter@ctive TV Cross-Site Request Forgery Vulnerability

Grundig Smart Inter@ctive TV is a television device. A cross-site request forgery vulnerability exists in Grundig Smart Inter@ctive TV version 3.0. A remote attacker can exploit this vulnerability by sending a POST request with an ID value to TCP port 8085 to access the TV desktop and perform...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

The CVE-2018-13989 issue affects Grundig Smart Inter@ctive TV 3.0. It enables Cross-Site Request Forgery via a POST to TCP port 8085 that carries a predictable ID (example: /sendrcpackage?keyid=-2544&keysymbol=-4081), allowing an attacker to shut off the device. Multiple sources (NVD entry and CN...

PT-2018-12261

Name of the Vulnerable Software and Affected Versions Grundig Smart Inter@ctive TV version 3.0 Description The issue allows for CSRF attacks via a POST request to TCP port 8085, utilizing a predictable ID value. For example, a request to the API endpoint "/sendrcpackage" with parameters such as...

CVE-2018-13989: Cross-Site Request Forgery (CSRF)

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...