Skyworth develops consumer electronics and digital television equipment, with reported vulnerabilities centered on its Aurora media and set-top box product lines. The observed weakness classes reflect web-facing and file-system exposure in firmware and streaming devices, centered on path traversal, cross-site scripting, and data-encryption gaps typical of connected appliance attack surfaces. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Skyworth over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-41873CRITICAL Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora B | Oct 26, 2021 | 10.0 | 30 | NO | NO |
CVE-2020-26732HIGH SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attack | Jan 14, 2021 | 7.5 | 24 | NO | NO |
CVE-2020-26733MEDIUM Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 allows authenticated attacker to inject their own script int | Jan 14, 2021 | 5.4 | 19 | NO | NO |
CVE-2023-40930MEDIUM An issue in the directory /system/bin/blkid of Skyworth v3.0 allows attackers to perform a directory traversal via mounting the Udisk to /mnt/. | Sep 20, 2023 | 6.8 | 18 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Skyworth.
Media articles that mention a CVE ID that affects a product developed by Skyworth — matched by CVE ID, not by vendor name.