Threats tagged 'ghsa-6pfw-v7rf-jx64'

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 has an unauthenticated denial-of-service vulnerability in its UPnP/DLNA AVTransport SOAP service. An attacker on the local network can send a crafted SetAVTransportURI request to TCP port 38400 to freeze the TV's software layer. This causes the device to become completely unresponsive to remote or front-panel inputs, requiring a physical power cycle to recover.