Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-123993— Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access

Quick assessment

Affected
Hisense VIDAA
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

海信 VIDAA 智能电视固件版本 V0000.01.00a.P0220 存在未授权访问漏洞：该固件中集成的 Google Cobalt 浏览器引擎 QA 构建版本，在所有网络接口上通过 TCP 4444 端口暴露了 WebDriver 自动化服务，且未要求任何身份验证或配对操作。位于同一局域网内的攻击者可连接至该暴露的 WebDriver 服务，执行任意 JavaScript 代码，读取并窃取敏感的 localStorage 数据（包括 ACR 遥测数据、MAC 地址、广告服务凭证及位置信息），向显示界面注入持久

CVSS 8.8 · High

Affected Version Matrix 1

VendorProduct Version RangeStatus
Hisense VIDAA 0000.01.00a.P0220 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-123993

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access
Source: CVE Program / CVE List V5
Vulnerability Description
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of the Google Cobalt browser engine exposes the WebDriver automation server on TCP port 4444 across all network interfaces without any authentication or pairing requirement. A LAN-adjacent attacker can connect to the exposed WebDriver service to execute arbitrary JavaScript, read and exfiltrate sensitive localStorage data including ACR telemetry, MAC addresses, ad-service credentials, and location data, inject persistent content onto the display, and access the window.hisense native bridge to perform filesystem read/write and system-state operations.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
遗留的调试代码
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hisense VIDAA 0000.01.00a.P0220 -

II. Public POCs for CVE-2026-123993

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-123993

请登录查看更多情报信息。

Other References for CVE-2026-123993 (2)

Same Patch Batch · Hisense · 2026-11-06 · 6 CVEs total

CVE-2026-123998 8.3 HIGH Hisense VIDAA Smart TV MQTT Broker Authentication Bypass
CVE-2026-123997 6.5 MEDIUM Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
CVE-2026-123994 6.3 MEDIUM Hisense VIDAA Smart TV DIAL Service Unauthenticated Access
CVE-2026-123996 4.6 MEDIUM Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
CVE-2026-123995 4.6 MEDIUM Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI

IV. Related Vulnerabilities

Same product: VIDAA
Same vendor: Hisense
Same weakness: CWE-489