LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Three vulnerabilities in LG's webOS platform can be chained together to grant an attacker on the same local network root access to certain LG smart TVs. The attack requires no PIN or user interaction, making it a pre-authentication exploit. The vulnerability chain was confirmed on two TV models: the 32LQ636BPSA and the 27TQ600SW, both running webOS 7.5.7-25 firmware. SSD Secure Disclosure published an advisory on October 12 detailing the vulnerability chain. LG has issued a patch to address the vulnerabilities. The attack surface is limited to the local network, reducing but not eliminating the risk for affected users.