Vulnerability Report

CVE-2025-55971

Title: Tcl 65C655 Server-Side Request Forgery (SSRF)

SSRF

Proof Of Concept

No public PoC currently indexed for CVE-2025-55971.

CWE Category CWE-918

Published Date Oct 03, 2025

Modified Date Oct 15, 2025

Exploit Status Not Found

Score 4.7 CVSS v3.1

Exploit Probability (EPSS)

0.29%

Vulnerability Summary

CVE-2025-55971: TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) vulnerability via the UPnP MediaRenderer service (AVTransport:1). The device accepts unauthenticated SetAVTransportURI SOAP requests over TCP/16398 and attempts to retrieve externally referenced URIs, including attacker-controlled payloads. The blind SSRF allows for sending requests on behalf of the TV, which can be leveraged to probe for other internal or external services accessible by the device (e.g., 127.0.0.1:16XXX, LAN services, or internet targets), potentially enabling additional exploit chains.

Impacted Vendors

tcl 1

Reference Links

https://github.com/Szym0n13k/CVE-2025-55971-Blind-Unauthenticated-SSRF-in-TCL-Smart-TV-UPnP-DLNA-AVTransport https://www.youtube.com/watch?v=FeNLGR_xFIA

CVSS v3.1

Source Entity 134c704f-9b21-4f2e-91b3-4a467353bcc0

Severity MEDIUM

4.7

Attack Vector

ADJACENT_NETWORK

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2025-55971 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

October 15, 2025 MODIFIED

Vulnerability data or affected products updated.

October 15, 2025 MODIFIED

Vulnerability data updated via NVD.

October 03, 2025 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector ADJACENT_NETWORK

Complexity LOW

Privileges N/A

Interaction NONE

CVSS Vector String


                                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Affected Stack

No specific products linked.