CVE-2019-6005

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's…

published September 12, 2019

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

⚠️ A crafty firmware oversight lets remote attackers sneak in and take control of your Smart TV Box without you ever knowing! 📺💥 Think of it like a hotel room where the front desk accidentally gave out keys to unauthorized guests — they can waltz right in and change the TV channel whenever they please! An attacker could install unwanted software, change device settings, or even hijack your viewing experience—all without your permission. Imagine trying to watch your favorite show while an intruder takes over your device like a mischievous guest!

Put simply

Think of it like a hotel room where the front desk accidentally gave out keys to unauthorized guests — they can waltz right in and change the TV channel whenever they please! This vulnerability in Smart TV Box firmware versions prior to 1300 allows unauthorized access through the Android Debug Bridge (ADB) on port 5555/TCP, enabling attackers to perform a range of operations remotely.

What to do

An attacker could install unwanted software, change device settings, or even hijack your viewing experience—all without your permission. Imagine trying to watch your favorite show while an intruder takes over your device like a mischievous guest! Patch your Smart TV Box firmware to version 1300 or later to close this gap. Additionally, consider disabling ADB connections when not in use to enhance your security. 💻🔒 You've got this! Get that firmware updated and secure your Smart TV Box today! 🛡️😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02123 · 81.7th percentile
Published
2019-09-12T15:58Z
EPSS history
Timeline
  • 12 SEP 15:58Z
    Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's…
    cvelistv5