FBI advierte sobre los riesgos de seguridad asociados a los Smart TV

02/12/2019 Gustavo Genez

A través de un comunicado, la entidad norteamericana busca concientizar a los usuarios sobre los riesgos de seguridad asociados a los televisores inteligentes .

The post FBI advierte sobre los riesgos de seguridad asociados a los Smart TV appeared first on WeLiveSecurity

Gustavo Genez

Informático de corazón y apasionado por la tecnología. La misión de este blog es llegar a los usuarios y profesionales con información y trucos acerca de la Seguridad Informática.

CVE-2020-24848 23/10/2020
FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain complete persistent access to the local system.
CVE-2020-24847 23/10/2020
A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthenticated attacker can lure the victim to visit his website by social engineering or another attack vector. Due to this issue, an unauthenticated attacker can change the newSSID and hostapd_wpa_passphrase.
CVE-2020-5990 23/10/2020
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in the ShadowPlay component which may lead to local privilege escalation, code execution, denial of service or information disclosure.
CVE-2020-5978 23/10/2020
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in its services in which a folder is created by nvcontainer.exe under normal user login with LOCAL_SYSTEM privileges which may lead to a denial of service or escalation of privileges.
CVE-2020-5977 23/10/2020
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure.

Comparte esto:

Gustavo Genez

También te puede gustar

Una filtración del código de Android Q revela una posible implementación de biometría facial

Desafío ESET #41: esteganografía en el Hotel Overlook

El malware bancario, de nuevo entre los ciberataques más comunes