Vulnerabilities > Supra

DATE CVE VULNERABILITY TITLE RISK
2019-06-07 CVE-2019-12477 Path Traversal vulnerability in Supra Stv-Lc40Lt0020F Firmware
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri= URI.
local
low complexity
supra CWE-22
2.1