Cpe:2.3:o:hisense:vidaa_smart_tv_firmware:v0000.01.00a.p0220:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ohisensevidaa_smart_tv_firmwarev0000.01.00a.p0220/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 06 Nov 2026 21:28:58 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgHisense VIDAA Smart TV authentication bypass (CVE-2026-123998)https://feed.craftedsignal.io/briefs/2026-11-hisense-vidaa-auth-bypass/Fri, 06 Nov 2026 21:28:58 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-hisense-vidaa-auth-bypass/Hisense VIDAA Smart TV firmware version V0000.01.00a.P0220 contains an authentication bypass in the MQTT broker on TCP port 36669, allowing unauthorized remote control via brute force or unauthenticated commands.Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its remote-control MQTT broker on TCP port 36669. The service accepts default credentials and an ineffective 4-digit pairing PIN with no rate limiting or account lockout, allowing the entire code space to be brute-forced in approximately five seconds. Furthermore, specific control actions require no authentication at all.

Impact

A LAN-adjacent attacker can perform unauthorized actions, including injecting key events, changing volume, switching input sources, enumerating inputs, and launching arbitrary installed applications. The vulnerability poses a significant risk in deployments such as hotels where untrusted devices share a local network.

Recommendation

  • Perform network segmentation to isolate Smart TVs from primary corporate or guest data networks.
  • Disable remote control features if not required by the specific deployment.
  • Monitor for high-frequency traffic directed toward TCP port 36669 originating from non-authorized devices.
]]>highadvisory