Supra Smart Cloud TV Remote File Containment Vulnerability

Zoran Supra Smart Cloud TV is a smart TV from Zoran USA. A security vulnerability exists in the 'openLiveURL' function in Zoran Supra Smart Cloud TV. A local attacker can exploit this vulnerability to broadcast fake videos without authentication via /remote/mediacontrol?action=setUri&uri= URI...

Supra Smart Cloud TV - 'openLiveURL()' Remote File Inclusion

Exploit Title: Remote file inclusion Date: 03-06-2019 Exploit Author: Dhiraj Mishra Vendor Homepage: https://supra.ru Software Link: https://supra.ru/catalog/televizory/televizorsuprastvlc40lt0020f/ CVE: CVE-2019-12477 References: https://nvd.nist.gov/vuln/detail/CVE-2019-12477...