VULNERABILITY INTELLIGENCE
CVE-2019-6005
CVSS score9.8 CRITICAL
EPSS probability2.12%
CISA KEVNot currently listed
Published2019-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP.
Primary references
- vultures@jpcert.or.jp — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory