Skyworth

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Skyworth records in CISA KEV

No Skyworth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gn542vf Boa Firmware 1 record HIGH Gn542vf Firmware 1 record LOW Penguin Aurora Box Firmware 1 record MEDIUM Skyworth Os 1 record HIGH

Records

4 records

TI-2020-16256 CVE-2020-26732 · GHSA-cmcj-43v4-7269

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the…

HIGH 66

SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01529 Published 2021-01-14 No fix listed CWE-311

TI-2023-21617 CVE-2023-40930 · GHSA-mhfv-c9cp-wjp4

An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform…

HIGH 65

An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01333 Published 2023-09-20 No fix listed CWE-22

TI-2021-18484 CVE-2021-41873 · GHSA-92vx-qv78-v745

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent…

MEDIUM 45

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00961 Published 2021-10-26 No fix listed

TI-2020-16257 CVE-2020-26733 · GHSA-v2p5-mvpw-w7pp

Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0…

LOW 26

Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script into the page via DDNS Configuration Sectio…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0069 Published 2021-01-14 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0