What is CVE-2021-41873?

CVE-2021-41873 is a critical-severity vulnerability in Skyworth Penguin Aurora Box. CVSS score: 10.0/10. Published 2021-10-26.

How severe is CVE-2021-41873?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Vulnerability in Skyworth Penguin Aurora Box

CVE-2021-41873

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV.

EPSS: 0.009 (57.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H.

Affected products

Skyworth Penguin_aurora_box — versions 41502
Skyworth Penguin_aurora_box_firmware
N/a — versions n/a

References

cve@mitre.org (Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-41873?: CVE-2021-41873 is a critical-severity vulnerability in Skyworth Penguin Aurora Box. CVSS score: 10.0/10. Published 2021-10-26.
How severe is CVE-2021-41873?: Critical severity. CVSS v3 base score is 10.0 out of 10.