This vulnerability arises from improper restriction of URL schemes and destinations in the SmartCenter browserseturl command of the Telefunken TE24553B45V2DZ Smart TV. An attacker with local network access can exploit this to cause the embedded browser to issue requests to unintended internal or loopback destinations, such as 127.0.0.1, which are normally unreachable via standard browser navigation. This can lead to unauthorized interaction with internal services. The issue is present in firmware version 2.78.0.0 and resolved in version 2.85.2.0.

An attacker on the same local network can leverage this SSRF vulnerability to interact with internal services on the device or network that are normally inaccessible, potentially exposing sensitive information or enabling further attacks. The CVSS 4.0 base score is 7.1 (high severity), reflecting the network attack vector with low complexity and no privileges required, but with high impact on confidentiality and low impact on availability and integrity.

A fixed firmware version 2.85.2.0 is available that resolves this vulnerability. Users and administrators should upgrade affected devices from version 2.78.0.0 to version 2.85.2.0 or later to remediate the issue. No other mitigation guidance is provided in the vendor advisory.