medium6.8
CVE-2021-27942
Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, bec…
Impact
Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vizio | P65-F1 Firmware | Version 6.0.31.4-2 |
| Vizio | E50x-E1 Firmware | Version 10.0.31.4-2 |