Skyworth E900V21D (E900V21D)

Skyworth E900V21D (E900V21D)
Security Grade D Calculator v	Skyworth E900V21D Brand: Skyworth (Parent: Skyworth Group) Category: Set-top box • Model / Gen: E900V21D Release Date: 2019-01-16 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	—
Known vulnerabilities	Rare	🔗 Proof
Prior attacks	Rare	🔗 Proof
Updatability	None	—
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	No	—
Communications	Encrypted with obselete encryption	—
Storage	No encryption	—
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Basic	—
Authentication	Basic	🔗 Proof
Brute-force protection	Absent	—
Event logging	Partial logging	—
Passwords	Default/Common/Easy to guess	—
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	Skyworth OS (Companion App: )
Hardware (CPU / GPU)	CPU: Amlogic S905L3 • GPU:
Memory & Storage	Memory: 1GB RAM • Storage: 8GB eMMC
Power, Battery & Charging	Battery: None • Power: • Charging:
Display & Camera	Display: None • Camera: None
Sound & Connectivity	Sound: • Connectivity: Ethernet,HDML,USB,Wi-Fi
Physical (Dimensions & Mass)	Dimensions: • Mass:

This IPTV set-top box runs Skyworth OS. CVE-2023-40930 is a path traversal vulnerability in Skyworth OS 3.0 (CVSS 6.7, Medium) that allows an attacker to read arbitrary files on the device. Public write-ups also show that this model's USB debugging menu and a default PIN can be triggered by key combinations, and third-party firmware can be installed, which indicates weak access control. Because the box sits behind the home gateway, the risk is limited to the local network.