CVE:CVE-2020-28055
CNNVD:CNNVD-202011-811
Tcl Communication TCL Android Smart TV是中国TCL通讯（Tcl Communication）公司的一款智能电视。
TCL Android Smart TV series V8-R851T02-LF1 V295及之前版本，V8-T658T01-LF1 V373版本存在安全漏洞，该漏洞源于允许本地攻击者如恶意应用程序,对数据的读和写供应商TCL,数据供应商升级,电视和var TerminalManager目录内的文件系统。攻击者可利用该漏洞通过写入数据供应商的upgrage文件夹来执行虚假的系统升级。
solution:Upgrade tcl 32s330_firmware to a higher version than v8-r851t10-lf1v091,and avoid the version (,v8-r851t10-lf1v091); Upgrade tcl 40s330_firmware to a higher version than v8-r851t10-lf1v091,and avoid the version (,v8-r851t10-lf1v091); Upgrade tcl 43s434_firmware to a higher version than v8-r851t02-lf1v440,and avoid the version (,v8-r851t02-lf1v440); Upgrade tcl 50s434_firmware to a higher version than v8-r851t02-lf1v440,and avoid the version (,v8-r851t02-lf1v440); Upgrade tcl 55s434_firmware to a higher version than v8-r851t02-lf1v440,and avoid the version (,v8-r851t02-lf1v440); Upgrade tcl 65s434_firmware to a higher version than v8-r851t02-lf1v440,and avoid the version (,v8-r851t02-lf1v440); Upgrade tcl 75s434_firmware to a higher version than v8-r851t02-lf1v440,and avoid the version (,v8-r851t02-lf1v440)