| Skyworth E900V21D (E900V21D)
|
|
Security Grade
Calculator v1
|
Skyworth E900V21D
Release Date: 2019-01-16 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
—
|
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
|
| Prior attacks
|
Rare
|
🔗 Proof
|
|
| Updatability
|
None
|
—
|
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
No
|
—
|
|
| Communications
|
Encrypted with obselete encryption
|
—
|
|
| Storage
|
No encryption
|
—
|
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Basic
|
—
|
|
| Authentication
|
Basic
|
🔗 Proof
|
|
| Brute-force protection
|
Absent
|
—
|
|
| Event logging
|
Partial logging
|
—
|
|
| Passwords
|
Default/Common/Easy to guess
|
—
|
|
| Category Score
|
Score: 3 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Skyworth OS (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: Amlogic S905L3 • GPU:
|
| Memory & Storage
|
Memory: 1GB RAM • Storage: 8GB eMMC
|
| Power, Battery & Charging
|
Battery: None • Power: • Charging:
|
| Display & Camera
|
Display: None • Camera: None
|
| Sound & Connectivity
|
Sound: • Connectivity: Ethernet,HDML,USB,Wi-Fi
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
This IPTV set-top box runs Skyworth OS. CVE-2023-40930 is a path traversal vulnerability in Skyworth OS 3.0 (CVSS 6.7, Medium) that allows an attacker to read arbitrary files on the device. Public write-ups also show that this model's USB debugging menu and a default PIN can be triggered by key combinations, and third-party firmware can be installed, which indicates weak access control. Because the box sits behind the home gateway, the risk is limited to the local network.
