Threat database

TVU Networks TVU Receiver and Transceiver devices with firmware versions prior to 7.9 have a missing authentication vulnerability in their REST API. This flaw allows remote unauthenticated attackers to read sensitive device information and modify device configurations, including DNS settings, potentially enabling man-in-the-middle attacks on connections to TVU cloud infrastructure. The vulnerability is critical with a CVSS 4.0 score of 9.3.

TVU Networks TVU Receiver and Transceiver devices with firmware versions before 7.9 have an authentication bypass vulnerability in the web management login endpoint. This flaw allows remote attackers to gain administrative access by submitting an empty or missing UserName parameter in a POST request, bypassing client-side validation and ignoring password requirements. Successful exploitation grants full administrative control over the device's web interface.