Vulnerabilities

TI-2021-09272 CVE-2021-27944 · GHSA-28c3-vcgc-4w82

Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart…

MEDIUM 48

Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs do not enforce access controls, allowing an unauthenticated threat actor to access privileged functionality, leading to OS com…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03536 Published 2021-08-26 No fix listed CWE-78

TI-2021-09270 CVE-2021-27942 · GHSA-f4j5-954q-h2r6

Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute…

LOW 30

Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web roo…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00447 Published 2021-08-03 No fix listed

TI-2021-09271 CVE-2021-27943 · GHSA-j832-p674-7p6p

The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart…

LOW 35

The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vulnerable to a brute-force attack (against only 10000 possibilities), allowing a threat actor to forc…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00925 Published 2021-08-02 No fix listed CWE-307

Vulnerabilities

Filters

Several high privileged APIs on the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart…

Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute…

The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart…