Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-05T09:21:40.826Z
Reserved: 2018-07-11T00:00:00
Link: CVE-2018-13989

No data.

Status : Modified
Published: 2018-07-11T16:29:00.673
Modified: 2024-11-21T03:48:22.877
Link: CVE-2018-13989

No data.