EUVD-2020-14178

Malware in sbrugna...

CVE-2020-21406

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

CVE-2020-21405

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

CVE-2019-6005

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

CVE-2020-21405

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

CVE-2020-21406

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

Design/Logic Flaw

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

Denial of service

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

CVE-2020-21406

The CVE-2020-21406 vulnerability affects RK Smart TV Box MAX and V88 SmartTV box. It allows a denial-of-service via the switchNextDisplayInterface service. According to the initial records, the issue has a CVSS v3.1 base score of 7.5 (Network, no authentication, low complexity, high impact on ava...

CVE-2020-21406

An issue was discovered in RK Smart TV Box MAX and V88 SmartTV box that allows attackers to cause a denial of service via the switchNextDisplayInterface service...

CVE-2020-21405

An issue was discovered in H96 Smart TV Box H96 Pro Plus allows attackers to corrupt files via calls to the saveDeepColorAttr service.unk...

CVE-2020-21405

CVE-2020-21405 affects H96 Smart TV Box H96 Pro Plus. The issue allows an attacker to corrupt files via calls to the saveDeepColorAttr service. Root cause details are not provided in the supplied documents. CVSS v3.1 base score 7.5 (HIGH), vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. Exploitation...

RK Smart TV Box MAX和V88 SmartTV Box 安全漏洞

The Amazon RK Smart TV Box and V88 SmartTV Box are both set-top boxes from Amazon.com, Inc. A security vulnerability exists in the RK Smart TV Box MAX and V88 SmartTV Box that originated from a vulnerability that allows an attacker to cause a denial of service via the switchNextDisplayInterface...

H96 Smart TV Box 资源管理错误漏洞

H96 Smart TV Box is a set-top box from H96. A security vulnerability exists in H96 Smart TV Box where an attacker can corrupt files by calling saveDeepColorAttr service.unk...

CVE-2019-6005

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

Authentication flaw

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

CVE-2019-6005

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP...

KDDI Smart TV Box Access Control Error Vulnerability

KDDI Smart TV Box is a smart TV box from KDDI Japan. An Access Control Error vulnerability exists in KDDI Smart TV Boxes using firmware versions prior to 1300, which stems from the program's failure to restrict access rights and can be exploited by remote attackers to perform arbitrary operations...

JVN#17127920: Smart TV Box fails to restrict access permissions

Smart TV Box provided by KDDI CORPORATION enables access to Android Debug Bridge via port 5555/TCP of LAN side interface. When a cable television provider sets up Smart TV Box at an individual residence, direct access from outside to the LAN side interface of Smart TV Box is disabled. However if...