ZeroHour

CVE-2021-27942

PoC
CVSS 3.1
6.8 medium
EPSS
<1%p38
Published
()
Modified
Description

Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.

Vendors
vizio
Products
p65-f1 firmware, e50x-e1 firmware
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.