Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-123996— Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication

Quick assessment

Affected
Hisense VIDAA
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

海信 VIDAA 智能电视固件版本 V0000.01.00a.P0220 存在身份验证缺失漏洞，该漏洞位于运行在 TCP 38400 端口的 UPnP/DLNA RenderingControl 服务中。漏洞允许位于同一局域网内的攻击者在完成一次性 DLNA 配对后，无需针对每条命令进行身份验证或使用会话令牌，即可发送 SetVolume（设置音量）、SetMute（静音）以及 SelectPreset(FactoryDefaults)（恢复出厂预设）等命令。攻击者可借此持续循环发送未经验证的指令，从而覆盖物理遥控

CVSS 4.6 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
Hisense VIDAA 0000.01.00a.P0220 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-123996

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Hisense VIDAA Smart TV UPnP/DLNA Missing Authentication
Source: CVE Program / CVE List V5
Vulnerability Description
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP/DLNA RenderingControl service on TCP port 38400 that allows a LAN-adjacent attacker to issue SetVolume, SetMute, and SelectPreset(FactoryDefaults) commands after a one-time DLNA pairing with no per-command authentication or session token. Attackers can send a continuous loop of unauthenticated commands to override the physical remote, change volume and mute, and reset all picture and audio calibration settings.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hisense VIDAA 0000.01.00a.P0220 -

II. Public POCs for CVE-2026-123996

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-123996

请登录查看更多情报信息。

Other References for CVE-2026-123996 (2)

Same Patch Batch · Hisense · 2026-11-06 · 6 CVEs total

CVE-2026-123993 8.8 HIGH Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access
CVE-2026-123998 8.3 HIGH Hisense VIDAA Smart TV MQTT Broker Authentication Bypass
CVE-2026-123997 6.5 MEDIUM Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
CVE-2026-123994 6.3 MEDIUM Hisense VIDAA Smart TV DIAL Service Unauthenticated Access
CVE-2026-123995 4.6 MEDIUM Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI

IV. Related Vulnerabilities

Same product: VIDAA
Same vendor: Hisense
Same weakness: CWE-306