CVE-2021-41873: Skyworth Penguin Aurora Box Firmware

Critical severity, CVSS 10.0. EPSS: 1% chance of exploitation in the next 30 days.

Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV.

Affected products

• Skyworth Penguin Aurora Box Firmware: affected versions not specified

Published 2021-10-26. Last modified 2026-06-17.