50
CVE-2019-12477
PoC ×2—CVSS 3.0
5.5 medium
EPSS
13%p96
Published
()
Modified
Description
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri= URI.
- Vendors
- supra
- Products
- stv-lc40lt0020f firmware
- Weakness
- CWE-22
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N