CVE-2019-9871

Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission

published May 31, 2019

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

🚨 An open adb port with root permissions? That’s a recipe for disaster on Jector Smart TV FM-K75 devices! Think of it like leaving your front door wide open with a welcome mat that has your key hidden underneath — any savvy visitor can walk right in and take control of your living room! An attacker could exploit this vulnerability to remotely execute any code on your Smart TV, potentially controlling your device like a puppet. This means they could install malicious applications, spy on you, or even hijack your viewing experience! 😱

Put simply

Think of it like leaving your front door wide open with a welcome mat that has your key hidden underneath — any savvy visitor can walk right in and take control of your living room! CVE-2019-9871 allows remote code execution due to an open ADB (Android Debug Bridge) port that grants root access to unauthorized users, making it a straightforward target for exploitation.

What to do

An attacker could exploit this vulnerability to remotely execute any code on your Smart TV, potentially controlling your device like a puppet. This means they could install malicious applications, spy on you, or even hijack your viewing experience! 😱 To secure your device, disable the ADB feature if you’re not actively using it and ensure your Smart TV firmware is up to date. If possible, restrict ADB access to specific IP addresses or networks only. Regularly check for security updates! You've got this! With these steps, you're taking major strides in securing your Smart TV from potential threats. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05809 · 93.1th percentile
Published
2019-05-31T19:55Z
EPSS history
Timeline
  • 31 MAY 19:55Z
    Jector Smart TV FM-K75 devices allow remote code execution because there is an adb open port with root permission
    cvelistv5