← Back

Skyworth

skyworth

4 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Gn542vf Boa Firmware
gn542vf_boa_firmware
1 CVE
Gn542vf Firmware
gn542vf_firmware
1 CVE
Penguin Aurora Box Firmware
penguin_aurora_box_firmware
1 CVE
Skyworth Os
skyworth_os
1 CVE
Gn542vf Boa
gn542vf_boa
0 CVEs
Gn542vf
gn542vf
0 CVEs
Penguin Aurora Box
penguin_aurora_box
0 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-40930
1Skyworth
1Skyworth Os
Jun 17, 2026
Sep 20, 2023
N/A· v4
6.8 MEDIUM· v3
N/A· v2
An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/.
CVE-2021-41873
1Skyworth
1Penguin Aurora Box Firmware
Jun 17, 2026
Oct 26, 2021
N/A· v4
10.0 CRITICAL· v3
6.4 MEDIUM· v2
Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerabilit...Show more
Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV.Show less
CVE-2020-26733
1Skyworth
1Gn542vf Firmware
Jun 17, 2026
Jan 14, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script into the page via DDNS Configuration Sectio...Show more
Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script into the page via DDNS Configuration Section.Show less
CVE-2020-26732
1Skyworth
1Gn542vf Boa Firmware
Jun 17, 2026
Jan 14, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepti...Show more
SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.Show less