CPE
Hisense VIDAA Smart TV firmware version V0000.01.00a.P0220 exposes an unauthenticated WebDriver server on TCP port 4444, enabling local network attackers to execute arbitrary JavaScript and perform system-level operations via the native bridge.