The vulnerability stems from an improper restriction of URL schemes and destinations in the SmartCenter browserseturl command, effectively creating a Server‑Side Request Forgery condition. An attacker who can reach the Telefunken TE24553B45V2DZ Smart TV on the local network can instruct the embedded browser to issue requests to any loopback or internal address, including 127.0.0.1, and receive responses that would otherwise be inaccessible through normal browser navigation. This enables exposure of internal services and could allow further exploitation of vulnerabilities on those services, potentially leading to remote code execution or data exfiltration if those services are insecure.

A Telefunken TE24553B45V2DZ Smart TV running the Vestel MB181 / Voltron181 / TiVo OS platform. Firmware versions beginning with V2.78.0.0 are affected. The issue is fixed in firmware V2.85.2.0.

The CVSS score of 7.1 indicates a high‑severity flaw; the exploit requires the attacker to be on the same local network and to have access to the SmartCenter interface. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no currently known widespread exploitation. Nonetheless, the local network scope makes it a significant risk for users who expose the SmartCenter interface to untrusted LAN traffic or who run sensitive services on the same network. The primary attack vector is a local network attacker using the browserseturl command to direct the TV’s browser to internal services.