Zenofex: 1 revision: Moving from DC22 to main site.

2014-08-17T08:23:00Z

1 revision: Moving from DC22 to main site.

← Older revision	Revision as of 08:23, 17 August 2014
(No difference)

CJ: /* Images */

2014-08-05T22:02:02Z

Images

New page

__FORCETOC__
{{Disclaimer}}
[[File:Vizio_SmartTV_VF553XVT.png|200px|left|thumb]]
[[Category:Televisions]]
This page will be dedicated to a general overview, descriptions, and information related to the Vizio Smart TV (VF553XVT).

== Images ==
<gallery>
file:Vizio LCE.png
</gallery>

== Exploitation ==

A Local Command Execution vulnerability exists in a series of Vizio Smart TV's, among others, that allows arbitrary commands to be run as root.

The LCE is found in the Wifi password field. Since the field is only accessible when the TV is offline, we will need to utilize a USB-UART device. Using that, we can create a shell with root access, settings 9600,8n1.

First enter the command below, it creates a character device pointing to the USB UART that we can talk to:
<pre>
;mknod /tmp/gtvhacker c 188 0;
</pre>

Next enter the command below, it pipes out input and output from the UART, to the character device, to the root shell:

<pre>
;bash 2>/tmp/gtvhacker>/tmp/gtvhacker</tmp/gtvhacker;bash;
</pre>

Vizio Smart TV (VF553XVT)​ - Revision history

Zenofex: 1 revision: Moving from DC22 to main site.

CJ: /* Images */

Vizio Smart TV (VF553XVT) - Revision history