VYPR

P65-F1

by Vizio

CVEs (2)

  • CVE-2021-27943HigAug 2, 2021
    risk 0.49cvss 7.5epss 0.01

    The pairing procedure used by the Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs and mobile application is vulnerable to a brute-force attack (against only 10000 possibilities), allowing a threat actor to forcefully pair the device, leading to remote control of the TV…

  • CVE-2021-27942MedAug 3, 2021
    risk 0.44cvss 6.8epss 0.00

    Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.