CVE-2021-27942

Name of the Vulnerable Software and Affected Versions: Vizio P65-F1 version 6.0.31.4-2 Vizio E50x-E1 version 10.0.31.4-2

Description: The issue allows a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality. This is possible because files on the USB drive are effectively under the web root and can be executed.

Recommendations: For Vizio P65-F1 version 6.0.31.4-2, consider disabling the Smart Cast functionality until a patch is available. For Vizio E50x-E1 version 10.0.31.4-2, consider disabling the Smart Cast functionality until a patch is available.