Threats tagged 'ghsa-32qr-wwq4-8qhm'

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 has an input validation vulnerability in its UPnP/DLNA AVTransport SOAP service. This flaw allows a LAN-adjacent attacker to inject arbitrary URIs via the CurrentURI field of SetAVTransportURI without proper validation of scheme, host, or media legitimacy. Exploitation requires a one-time DLNA pairing and can lead to the TV fetching and rendering attacker-controlled content, enabling phishing pages, fake firmware prompts, and fake emergency alerts to be displayed, with silent execution of subsequent commands.