Vestel vulnerabilities

Products

• AC Charger EVC04 1
• EVC04 Configuration Interface 1
• Telefunken TE24553B45V2DZ Smart TV 1

Latest Vestel CVEs

Newest publication first

1. CVE-2026-15570 Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command

   Published 2026-08-07

   High·CVSS 7.1 EPSS 0.26%

   An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded br...

2. CVE-2025-3606 Vestel AC Charger Exposure of Sensitive System Information to an Unauthorized Control Sphere

   Published 2025-04-24

   High·CVSS 8.7 EPSS 0.42%

   Vestel AC Charger version 3.75.0 contains a vulnerability that could enable an attacker to access files containing sensitive information, such as credentials which could be used to further compromise the device.

3. CVE-2024-8997 SQLi in Vestel's EVC04 Configuration Interface

   Published 2025-03-18

   Critical·CVSS 9.8 EPSS 0.43%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vestel EVC04 Configuration Interface allows SQL Injection. This issue affects EVC04 Configuration Interface: before V3.187, V4.53.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.