EUVD-2018-5921

Malware in sbrugna...

Grundig Smart Inter@ctive TV Cross-Site Request Forgery Vulnerability

Grundig Smart Inter@ctive TV is a television device. A cross-site request forgery vulnerability exists in Grundig Smart Inter@ctive TV version 3.0. A remote attacker can exploit this vulnerability by sending a POST request with an ID value to TCP port 8085 to access the TV desktop and perform...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...

CVE-2018-13989

The CVE-2018-13989 issue affects Grundig Smart Inter@ctive TV 3.0. It enables Cross-Site Request Forgery via a POST to TCP port 8085 that carries a predictable ID (example: /sendrcpackage?keyid=-2544&keysymbol=-4081), allowing an attacker to shut off the device. Multiple sources (NVD entry and CN...

CVE-2018-13989

Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device...