Vulnerabilities > Arcelikas > Grundig Smart Inter Ctive Firmware

DATE CVE VULNERABILITY TITLE RISK
2018-07-11 CVE-2018-13989 Cross-Site Request Forgery (CSRF) vulnerability in Arcelikas Grundig Smart Inter@Ctive Firmware 3.0
Grundig Smart Inter@ctive TV 3.0 devices allow CSRF attacks via a POST request to TCP port 8085 containing a predictable ID value, as demonstrated by a /sendrcpackage?keyid=-2544&keysymbol=-4081 request to shut off the device.
network
arcelikas CWE-352
8.3