CVE-2019-6005: Kddi Smart Tv Box Firmware

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as installing arbitrary software or changing the device settings via Android Debug Bridge port 5555/TCP.

Affected products

• Kddi Smart Tv Box Firmware: before 1300 (fixed in 1300)

Published 2019-09-12. Last modified 2026-06-17.