LG TV flaws could let attackers listen in, even in standby mode
Researchers found LG smart TVs collect network data and ACR viewing profiles, and demonstrated microphone audio capture plus undisclosed RCE vulnerabilities.
An investigation by Gamers Nexus with Level1Techs and independent researchers found LG TVs performing network discovery, collecting nearby Wi-Fi names and device identifiers, and conducting Automated Content Recognition (ACR) tracking. They demonstrated microphone audio capture even when the TV appeared off, and audio buffering while the TV was unplugged from the internet. Remote-code-execution vulnerabilities were reported to LG under ongoing responsible disclosure, with full details not yet public.
- LG TVs collect nearby Wi-Fi names, device identifiers, and ACR viewing fingerprints.
- Microphone audio capture shown even in standby and while the TV was offline.
- RCE vulnerabilities disclosed to LG; details pending responsible disclosure.
- Researchers recommend IoT network segmentation, prompt firmware updates, and disabling ACR.
- Products
- LG smart TVs
- Countries
- United States
From the original article
3 min read at malwarebytes.comTesting found that LG smart TVs can track viewing and scan home networks, while security flaws could let attackers record conversations.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.