Szym0N13K

**Name of the Vulnerable Software and Affected Versions** TCL 65C655 Smart TV version V8-R75PT01-LF1V269.001116 **Description** The TCL 65C655 Smart TV is susceptible to a Server-Side Request Forgery (SSRF) issue. This affects the UPnP MediaRenderer service (AVTransport:1), which accepts unauthenticated SetAVTransportURI SOAP requests over TCP/16398. The device attempts to retrieve externally referenced URIs, including attacker-controlled payloads. This blind SSRF allows sending requests on behalf of the TV to probe for internal or external services accessible by the device, such as 127.0.0.1:16XXX, LAN services, or internet targets, potentially enabling further exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TCL Smart TV (affected versions not specified) **Description** A TCL Smart TV with a vulnerable UPnP/DLNA MediaRenderer implementation is subject to a remote, unauthenticated Denial of Service (DoS) condition. An attacker can send a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, causing the device to become unresponsive. This denial of service persists while the attack continues and impacts all TV operations. Standard user controls and reboots do not restore functionality unless the attack ceases. The API endpoint affected is the UPnP control endpoint. The vulnerable request type is `SetAVTransportURI`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.