Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A LAN-adjacent attacker can connect to the exposed WebDriver service to execute arbitrary JavaScript, read and exfiltrate sensitive localStorage data including ACR telemetry, MAC addresses, ad-service credentials, and location data, inject persistent content onto the display, and access the window.hisense native bridge to perform filesystem read/write and system-state operations.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• vulncheck.com/…art-tv-unauthenticated-webdriver-remote-access Üçüncü taraf
• github.com/yehia-mamdouh/Hisense-Smart-TV-Security-Research İstismar kodu ya da analiz

Kayıt geçmişi

1. 6 Kas 2026 21:52Yayımlandı

İlgili açıklar

• 8,3 CVE-2026-123998Hisense VIDAA Smart TV MQTT Broker Authentication Bypass
• 6,5 CVE-2026-123997Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
• 4,6 CVE-2026-123996Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
• 4,6 CVE-2026-123995Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI
• 6,3 CVE-2026-123994Hisense VIDAA Smart TV DIAL Service Unauthenticated Access
• 8,1 CVE-2026-102344Lavish: DNS rebinding allows any website to read arbitrary local files and inject prompts into the AI agent via the unauthenticated local server