Threats tagged 'ghsa-h68h-965v-xmp9'

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 has an unauthenticated access vulnerability in its DIAL service on TCP port 56789. This flaw allows any device on the local network to send control requests without authentication or user notification. Attackers can query application states, list installed apps, terminate sessions, launch apps, and bypass YouTube's Origin check, potentially disclosing user viewing activity and subscriptions or disrupting device functionality.