Description
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the UPnP/DLNA AVTransport SOAP service that allows LAN-adjacent attackers to freeze the entire television software layer by sending a crafted SetAVTransportURI request on TCP port 38400. Attackers can exploit this flaw without credentials to render the device completely unresponsive to remote control or front-panel input, requiring a physical power cycle to restore functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hisense | VIDAA | 0000.01.00a.P0220 | — |
References
- Researcher Disclosure technical-description exploit
- VulnCheck Advisory: Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI third-party-advisory