CVE-2019-6005

Critical

Description

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP.

SeverityCritical
CVSS9.8
Exploit probability—
ProductKddi Smart Tv Box Firmware
PublishedSep 12, 2019
First seenSep 12, 2019

How to fix

Update
  • kddi smart_tv_box_firmware1300 or later

Affected products

ProductAffected versionsFixed in
kddi smart_tv_box_firmwarev < 13001300

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.