Skip to content
OpenAdvisories

Vendor

Hisense

6 known vulnerabilities.

Products

VIDAA 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-123997

    Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI

    Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the UPnP/DLNA AVTransport SOAP service that allows LAN-adjacent attackers to freeze the entire television software layer by sending a crafted Set…

    Hisense VIDAA
  • Medium 4.6
    CVE-2026-123996

    Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication

    Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP/DLNA RenderingControl service on TCP port 38400 that allows a LAN-adjacent attacker to issue SetVolume, SetMute, and SelectPreset(FactoryDefaults) c…

    Hisense VIDAA
  • Medium 4.6
    CVE-2026-123995

    Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI

    Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA AVTransport SOAP service that allows a LAN-adjacent attacker to inject arbitrary URIs via the CurrentURI field of SetAVTransportURI without validati…

    Hisense VIDAA
  • Medium 6.3
    CVE-2026-123994

    Hisense VIDAA Smart TV DIAL Service Unauthenticated Access

    Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability in the DIAL (Discovery and Launch) service on TCP port 56789, which accepts control requests from any LAN-adjacent device without authentication, pairing, or u…

    Hisense VIDAA