LG TV owners need to take action now to close a handful of flaws discovered in the software. Left untreated, these bugs could allow hackers to gain access to the television — or other devices on the same Wi-Fi network.
Security researcher Alexandru Lazăr unearthed the four vulnerabilities within WebOS, the software developed by LG that powers its Smart TVs. Attackers can use this loophole to bypass the usual authorisation process and gain root access to internet-connected TVs from anywhere in the world.
Once inside, your LG Smart TV becomes the hacker's LG Smart TV.
LG TV owners should trigger the WebOS update now to prevent hackers from using the flaw to cause chaos with their telly or other devices connected to the same Wi-Fi network
LG PRESS OFFICE
It can be used as a launch pad to gain access to other devices connected to the same Wi-Fi network to spread malware, monitor your activity, or leverage your devices as part of a botnot. If you have an LG Smart TV, it's worth keeping an eye out for unusual network activity, including sudden spikes of activity when you're not home.
Fortunately, there's no indication that hackers can use the bug within WebOS to access the payment information stored with popular streaming services like Netflix, Disney+, or Prime Video on the platform.
Alexandru Lazăr, a researcher for cybersecurity firm Bitdefender, says the flaw exists in WebOS 4.0 through to 7.0, meaning thousands of LG TVs are impacted by the flaw. Before publishing the research, Lazăr informed LG about the issue on November 1, 2023.
LG issued a software fix for all four flaws in WebOS on March 22, paving the way for Alexandru Lazăr to publish the findings. If you haven't updated the software on your telly for some time, this is definitely one patch that you really don't want to miss.
If you want to check that your LG TV is running the latest version of WebOS, follow the steps below:
To avoid a similar issue in future, you can dive back into Settings > All Settings > Support > Software Update, and then toggle Auto Update to "On". With this enabled, your LG TV will download new versions of WebOS in the background and install the software when you're not using the telly.
LATEST DEVELOPMENTS
It's been a rough few months for online security, with the largest database of leaked login details published on the Dark Web just a few weeks ago. Dubbed the "mother of all breaches", the troubling dataset contains passwords for millions of Twitter, LinkedIn, Telegram, and Dropbox accounts.
