Hisense VIDAA Smart TV MQTT Broker Authentication Bypass

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its remote-control MQTT broker on TCP port 36669, which accepts publicly documented default credentials and an ineffective 4-digit pairing PIN with no rate limiting or lockout, allowing a brute force of the entire code space in about five seconds, while some actions require no pairing at all. A LAN-adjacent attacker can exploit this to inject key events, change volume, switch input sources, enumerate inputs, launch arbitrary installed applications, and monitor pairing activity, posing a significant risk in hotel deployments where untrusted LAN access is common.

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• vulncheck.com/…daa-smart-tv-mqtt-broker-authentication-bypass Üçüncü taraf
• github.com/yehia-mamdouh/Hisense-Smart-TV-Security-Research İstismar kodu ya da analiz

Kayıt geçmişi

1. 6 Kas 2026 21:59Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-123997Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
• 4,6 CVE-2026-123996Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
• 4,6 CVE-2026-123995Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI
• 6,3 CVE-2026-123994Hisense VIDAA Smart TV DIAL Service Unauthenticated Access
• 8,8 CVE-2026-123993Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access
• 5,3 CVE-2026-62850FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration a…