Source |
Security Affairs |
Identifiant |
1136991 |
Date de publication |
2019-06-03 09:36:03 (vue: 2019-06-03 12:00:40) |
Titre |
Expert shows how to Hack a Supra Smart Cloud TV |
Texte |
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication Summary:Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri=URI Technical Observation: We are abusing […]
|
Envoyé |
Oui |
Condensat |
/remote/media abusing action=seturi&uri=uri affairs allows any appeared are attacker authentication broadcast cloud control expert fake file first function hack how inclusion local observation: we openliveurl post remote security shows smart summary:supra supra technical video which without |
Tags |
Hack
|
Stories |
|
Notes |
|
Move |
|