CVE-2023-6317

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p63

Published

Apr 9, 2024 (Apr 9, 2024)

Modified

Jun 17, 2026

Description

A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA webOS 5.5.0 - 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA

Vendors: lg
Products: webos
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news6 stories

LG TV Vulnerabilities Expose 91,000 Devices

Infosecurity MagazineApr 10, 16:30 UTC · Apr 10, 2024Vulnerability CVE-2023-6317 CVE-2023-6318 CVE-2023-6319+1 CVEs

Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

The Hacker NewsApr 10, 08:58 UTC · Apr 10, 2024Vulnerability CVE-2023-6317 CVE-2023-6320 CVE-2023-6318+1 CVEs

Thousands of LG TVs are vulnerable to takeover—here’s how to ensure yours isn’t one

Ars Technica · SecurityApr 9, 19:12 UTC · Apr 9, 2024Vulnerability CVE-2023-6317 CVE-2023-6318 CVE-2023-6319+1 CVEs

Over 91,000 LG smart TVs running webOS are vulnerable to hacking

Security AffairsApr 9, 18:28 UTC · Apr 9, 2024Vulnerability CVE-2023-6317 CVE-2023-6318 CVE-2023-6319+1 CVEs

LG releases updates for vulnerabilities that could allow hackers to gain access to TVs

The RecordApr 9, 15:18 UTC · Apr 9, 2024Vulnerability CVE-2023-6317 CVE-2023-6318 CVE-2023-6319+1 CVEs

LG smart TVs may be taken over by remote attackers

Help Net SecurityApr 9, 00:00 UTC · Apr 9, 2024Vulnerability CVE-2023-6317 CVE-2023-6318 CVE-2023-6319+1 CVEs