Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| P65-f1_firmware | Vizio | 6.0.31.4-2 (including) | 6.0.31.4-2 (including) |