LG webOS Smart TVs Exposed to Pre-Authentication Root Takeover via Local Network

Three vulnerabilities in LG's webOS allow attackers on the same local network to achieve root access without user authentication or interaction. LG has released a fix, as detailed in an advisory from SSD Secure Disclosure.

Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner.

LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.

The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware

Read original article