CVE-2019-12477

Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication…

published June 7, 2019

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri= URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13318 · 96.4th percentile
Published
2019-06-07T14:51Z
EPSS history
Timeline
  • 07 JUN 14:51Z
    Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication…
    cvelistv5