Yes. In April 2024, Bitdefender disclosed four vulnerabilities in LG webOS versions 4 through 7. LG had released patches on March 22, 2024, before the public disclosure. If you own an LG TV, check its installed software and install the latest firmware available for your exact model. Restricting network access can reduce exposure, but it does not replace an update.
What the LG webOS vulnerabilities could do
Bitdefender’s April 9, 2024 report described four flaws, tracked as CVE-2023-6317, CVE-2023-6318, CVE-2023-6319, and CVE-2023-6320, affecting webOS versions 4 through 7 on LG TVs. The vulnerabilities were not all equivalent:
- CVE-2023-6317: could bypass a PIN authorization flow and allow creation of a privileged account.
- CVE-2023-6318 and CVE-2023-6319: could enable command injection leading to root access.
- CVE-2023-6320: could enable command execution as the dbus user.
These are reported capabilities of the vulnerabilities, not evidence that any particular owner’s TV was attacked. Read Bitdefender’s technical disclosure for details: Bitdefender Labs: vulnerabilities in LG webOS.
Which TVs and software versions were named?
Bitdefender listed these affected firmware and example model combinations. They are examples from its report, not a complete inventory of every potentially affected TV.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →#1 Best Overall
- DYNAMIC QNED COLOR: Enhances color accuracy for vibrant, more lifelike viewing with certified 100% Color Volume
- A7 AI PROCESSOR 4K GEN9: Enhanced brightness, improved sound, refined picture detail. It all comes together for a thrilling watching experience
- HDR10 PRO: Dynamically adjusts brightness, revealing crisp details and vivid color in both bright and dark scenes for a stunning, lifelike picture
- FILMMAKER MODE: Watch films just how the directors envisioned them with automatic preservation of the director's original colors, settings and frame rates for a true at-home cinematic experience FILMMAKER MODE with Ambient Light Technology
- WEBOS SMART PLATFORM: Delivers smarter, easier streaming, plus Google Gemini
| Example LG model | Firmware listed in Bitdefender’s report |
|---|---|
| LG43UM7000PLA | webOS 4.9.7–5.30.40 |
| OLED55CXPUA | webOS 5.5.0–04.50.51 |
| OLED48C1PUB | webOS 6.3.3-442 |
| OLED55A23LA | webOS 7.3.1-43 |
Do not infer that a model is safe or affected solely because it is absent from or resembles an example in this list. Check the software version on your set and consult LG’s support information for its exact model.
Why network exposure matters
Bitdefender said the vulnerable service was intended for access on a local network. Its 2024 disclosure reported that Shodan had identified more than 91,000 devices exposing the service to the internet. That is a researcher-reported snapshot of exposed devices at the time, not a current count of vulnerable or compromised TVs.
Rank #2
- Full HD IPS Display: Features 1920 X 1080 resolution with IPS technology for sharp imagery, vivid colors, and excellent visual contrast
- Wide Viewing Angle: Enjoy consistent picture quality from multiple viewing positions with wide vertical and horizontal viewing angles whether seated or standing
- webOS Smart TV Platform: Access streaming apps and smart features through the intuitive webOS interface with personalized recommendations for every family member
- Wireless Connection Support: Connect your devices seamlessly without cables for convenient streaming and content sharing
- Built-in Stereo Speakers: Equipped with dual 5W stereo speakers delivering clear audio and includes wall mounting capability for flexible installation options
Remote exploitation would require network reachability, such as a public IP address or a port forward, according to the Centre for Cybersecurity Belgium (CCB). A TV that is not directly reachable from the public internet may still be exposed to devices or people with access to its local network. These are different exposure conditions; neither figure nor condition establishes that a specific TV was compromised. The CCB advisory is available at Centre for Cybersecurity Belgium: vulnerabilities in LG webOS.
How to update an LG TV
- Connect the TV to the internet, unless you are following LG’s model-specific offline update instructions.
- Open the TV’s settings and find its software or software-update screen. Menu names and paths can vary by model and webOS version.
- Check for an update and install the latest version offered for your TV. Follow any on-screen restart instructions.
- Return to the software information screen and confirm the installed version. If no update appears, check LG’s support page for your exact model and its update instructions.
Bitdefender’s disclosure timeline says LG released patches on March 22, 2024, and that automatic and manual updates were released for affected firmware. The CCB likewise recommends installing available updates and checking the TV settings or LG support site. An update offered to one model or region should not be assumed available to every LG TV.
Rank #3
- Complete LG 32 Inch LB65 Series bundle includes an HD LED Smart AI TV, HDMI cable, streaming bundle, and 12 Month CPS Warranty for a complete home entertainment solution.
- HD LED display delivers vibrant colors, sharp detail, and enhanced clarity for everyday television viewing, movies, sports, and streaming content.
- LG AI Processor intelligently optimizes picture and sound quality to provide an improved viewing experience across live TV, streaming services, and connected devices.
- webOS Smart TV platform offers easy access to popular streaming apps, LG Channels, personalized recommendations, and an intuitive user interface.
- Built-in WiFi and Bluetooth connectivity allow quick access to online entertainment and wireless pairing with compatible devices and accessories.
Reduce exposure after updating
Install the firmware first. As an additional precaution, remove direct internet access to the TV if it is not needed, including any router port forward that exposes it. The CCB also recommends considering VPN or zero-trust technology when remote access is necessary. Those measures limit network exposure; they do not patch vulnerable software.
LG’s UK webOS TV policy, published April 19, 2022, says it provides software and security updates at least once a year for a minimum of two years after launch, and may continue updates for up to five years for critical security vulnerabilities. LG also notes that first-time setup may require a software update to obtain the latest available security patches. This policy does not establish whether a particular model still receives updates or identify its current patched firmware. See LG UK’s webOS TV update policy.
Rank #4
- 4k Ultra HD (2160p resolution): Enjoy breathtaking HDR10 4K movies and TV shows at 4 times the resolution of Full HD, and upscale your current content to Ultra HD-level picture quality.
- High Dynamic Range: Provides a wide range of color details and sharper contrast, from the brightest whites to the deepest blacks.
- All-in-one: Get right to your good stuff. With Fire TV, you can enjoy a world of entertainment from apps like Prime Video, Netflix, Disney+, Hulu, and HBO Max. Plus, stream for free with Fire TV Channels, Pluto TV, Tubi, and more. Access over 1.8 million movies and TV episodes. Subscriptions may be required. Feature and content availability may vary.
- Smart Home: Your smart home hub. Pair Fire TV with compatible smart home devices to see live camera feeds, use AirPlay, control your lighting and thermostat, and more.
- Free Content: Stream for free. Access over 1 million free movies and TV episodes from popular ad-supported streaming apps like Fire TV Channels, Tubi, and Pluto TV. Subscriptions may be required. Feature and content availability may vary.
If your TV no longer receives updates
If neither the TV’s update screen nor LG’s model-specific support page offers a newer firmware version, the available information here does not establish that the set is patched. Keep it off direct internet exposure and limit access to trusted devices on the local network. Network restrictions reduce opportunities for remote access but cannot establish that a past compromise did not occur; applying a patch also does not undo a historical compromise.
Quick Recap
Best Value
- MINI LED PROCESSOR 4K: Our advanced processor delivers brighter highlights and deeper blacks,* bringing every detail to life with stunning clarity
- PURE COLOR SPECTRUM: delivers one billion true-to-life colors, powered by advanced color technology and MiniLED precision. Enjoy rich reds, deep blues, and vibrant greens, making every scene leap off the screen with breathtaking realism.
- MINI LED HDR: Experience HDR picture quality with brighter highlights and deeper blacks than traditional HDR TVs.* Enjoy vibrant colors and lifelike details as this technology enhances brightness and contrast, making every image stand out with remarkable depth and realism.
- ENDLESS FREE CONTENT: Watch 2,700+ free streaming options, including 750+ subscription-free channels on Samsung TV Plus. Enjoy news, sports, movies, kids' shows and reality TV — all without a subscription. Discover endless entertainment with new content added regularly, tailored to your mood and interests.*
- SUPREME MINI LED DIMMING: delivers deep contrast and bright highlights for a truly superb picture.*
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
