CVE-2026-123993: fallo de gravedad alta en Hisense VIDAA
Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
38Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 8.7
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A LAN-adjacent attacker can connect to the exposed WebDriver service to execute arbitrary JavaScript, read and exfiltrate sensitive localStorage data including ACR telemetry, MAC addresses, ad-service credentials, and location data, inject persistent content onto the display, and access the window.hisense native bridge to perform filesystem read/write and system-state operations.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Hisense · VIDAAPoCs públicas encontradas — 1
cve_referencegithub.com/yehia-mamdouh/Hisense-Smart-TV-Security-Researchno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Hisense VIDAA
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-123998HIGHHisense VIDAA Smart TV MQTT Broker Authentication BypassEPSS —CVE-2026-123997HIGHHisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURIEPSS —CVE-2026-123996MEDIUMHisense VIDAA Smart TV UPnP/DLNA Missing AuthenticationEPSS —CVE-2026-123995MEDIUMHisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURIEPSS —CVE-2026-123994MEDIUMHisense VIDAA Smart TV DIAL Service Unauthenticated AccessEPSS —