Description
Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the UPnP/DLNA AVTransport SOAP service that allows LAN-adjacent attackers to freeze the entire television software layer by sending a crafted SetAVTransportURI request on TCP port 38400. Attackers can exploit this flaw without credentials to render the device completely unresponsive to remote control or front-panel input, requiring a physical power cycle to restore functionality.
Published: 2026-11-06
Score: 7.1 High
EPSS: n/a
KEV: No
Impact: Denial of Service that freezes the entire television software layer
Action: Mitigate
AI Analysis

Impact

Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 exposes an unauthenticated flaw in the UPnP/DLNA AVTransport SOAP service. A crafted SetAVTransportURI request sent over TCP port 38400 can halt the TV’s software stack, rendering the device unresponsive to remote control or front‑panel input. This denial of service can be triggered by any LAN‑adjacent attacker without needing credentials, and the TV must be power‑cycled to recover.

Affected Systems

The vulnerability impacts Hisense VIDAA Smart TVs running firmware V0000.01.00a.P0220. No additional vendor or version information is provided beyond the VAEN label. Users whose devices are built on this firmware are directly affected.

Risk and Exploitability

The flaw carries a CVSS score of 7.1, indicating substantial risk, but the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is a local network connection to TCP port 38400, which is typically open for UPnP functionality. Attackers can exploit the issue without authentication, and no patch or workaround is presently supplied by the vendor, so the risk remains high until a client‑side fix or network restriction is applied.

Generated by OpenCVE AI on November 6, 2026 at 20:22 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Restrict or block inbound traffic on TCP port 38400 using a host firewall or network ACL to prevent SetAVTransportURI requests from reaching the TV
  • Disable UPnP or DLNA services on the device if the TV interface or vendor settings allow, eliminating the vulnerable SOAP endpoint
  • Regularly monitor network traffic for unexpected SOAP requests or unexplained freezes, and maintain physical access to perform a power cycle if a DoS event occurs.

Generated by OpenCVE AI on November 6, 2026 at 20:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 06 Nov 2026 19:15:00 +0000

Type Values Removed Values Added
Description Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the UPnP/DLNA AVTransport SOAP service that allows LAN-adjacent attackers to freeze the entire television software layer by sending a crafted SetAVTransportURI request on TCP port 38400. Attackers can exploit this flaw without credentials to render the device completely unresponsive to remote control or front-panel input, requiring a physical power cycle to restore functionality.
Title Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI
Weaknesses CWE-770
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-11-06T18:59:03.091Z

Reserved: 2026-11-06T18:38:38.542Z

Link: CVE-2026-123997

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-06T19:17:45.207

Modified: 2026-11-06T19:17:45.207

Link: CVE-2026-123997

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-06T20:30:10Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling