- Description
- Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP.
- Source
- vultures@jpcert.or.jp
- NVD status
- Modified
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:kddi:smart_tv_box_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3571CD37-DFA6-4763-9B43-8DA632FBBEC9",
"versionEndExcluding": "1300"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:kddi:smart_tv_box:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A75F58C1-922E-40EE-8702-D8CFB9CF06B2"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]