iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Some LG TVs running specified webOS 4–7 releases were vulnerable to an attack chain that could progress from bypassing an authorization prompt to root access. LG released fixes before Bitdefender published its findings on April 9, 2024. Owners should check for and install the latest software update offered for their exact TV model.
How the vulnerability chain worked
Bitdefender reported four vulnerabilities in a webOS service used by LG’s ThinQ smartphone app. The first flaw, CVE-2023-6317, could bypass an on-screen PIN prompt and allow a privileged account to be created. Separate command-injection flaws could then be used with that access: CVE-2023-6318 and CVE-2023-6319 could lead to root access, while CVE-2023-6320 could execute commands as the dbus user, which the researchers described as having permissions similar to root.
In other words, “pre-auth” describes how the chain could begin: an attacker did not need the authorization prompt to succeed before creating privileged access. The later command-injection steps were described as authenticated. Bitdefender summarized the result this way: “These vulnerabilities let us gain root access on the TV after bypassing the authorization mechanism.”
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Why the local-network detail matters
The affected service was intended for local-network access and used ports 3000 and 3001. A device on the same network could therefore be within reach of the service, depending on network configuration. Bitdefender also reported finding more than 91,000 devices exposing the service to the internet through a Shodan observation. That figure describes the report’s 2024 observation, not the number of TVs currently vulnerable, and it does not establish that every observed device was exploited.
#1 Best Overall
- DYNAMIC QNED COLOR: Enhances color accuracy for vibrant, more lifelike viewing with certified 100% Color Volume
- A7 AI PROCESSOR 4K GEN9: Enhanced brightness, improved sound, refined picture detail. It all comes together for a thrilling watching experience
- HDR10 PRO: Dynamically adjusts brightness, revealing crisp details and vivid color in both bright and dark scenes for a stunning, lifelike picture
- FILMMAKER MODE: Watch films just how the directors envisioned them with automatic preservation of the director's original colors, settings and frame rates for a true at-home cinematic experience FILMMAKER MODE with Ambient Light Technology
- WEBOS SMART PLATFORM: Delivers smarter, easier streaming, plus Google Gemini
Internet exposure was not necessary to characterize the issue: the service’s intended use was on a LAN. Still, the historical observation is a reason to avoid exposing TV services directly to the public internet. Keep the TV on a trusted home network and review router settings if you have configured remote access or port forwarding.
Models and software examples in the report
Bitdefender listed the following vulnerable model-and-software combinations as examples. They are not a complete inventory of affected TVs, and a model not shown here should not be assumed unaffected solely because it is absent from this table.
Rank #2
- Full HD IPS Display: Features 1920 X 1080 resolution with IPS technology for sharp imagery, vivid colors, and excellent visual contrast
- Wide Viewing Angle: Enjoy consistent picture quality from multiple viewing positions with wide vertical and horizontal viewing angles whether seated or standing
- webOS Smart TV Platform: Access streaming apps and smart features through the intuitive webOS interface with personalized recommendations for every family member
- Wireless Connection Support: Connect your devices seamlessly without cables for convenient streaming and content sharing
- Built-in Stereo Speakers: Equipped with dual 5W stereo speakers delivering clear audio and includes wall mounting capability for flexible installation options
| TV model | webOS version range reported |
|---|---|
| LG43UM7000PLA | 4.9.7–5.30.40 |
| OLED55CXPUA | 5.5.0–04.50.51 |
| OLED48C1PUB | 6.3.3-442 (kisscurl-kinglake)–03.36.50 |
| OLED55A23LA | 7.3.1-43 (mullet-mebin)–03.33.85 |
Firmware numbering and update availability can vary by model and region. The example ranges help identify reported combinations; they are not a substitute for checking the update offered for your own set.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →What LG TV owners should do
- Find the exact model and installed software version. Check the TV’s settings for its device or support information, or use the model label if you cannot access the menu. Menu names differ between webOS generations.
- Check for a software update. Open the TV’s settings and locate the software-update option. Install the current update offered for that specific model and region; LG released fixes before the public report and Bitdefender said updates were available automatically and manually.
- Confirm the update completed. After installation, check the reported software version again. If no update appears, consult LG support information for the exact model and region rather than relying on the example versions above.
- Review network exposure. Do not configure a router to forward the TV’s service ports to the public internet. If you are unsure whether remote access or port forwarding is enabled, check the router’s settings or ask the person who manages the network.
Disclosure and patch timeline
| Date | Event |
|---|---|
| November 1, 2023 | Bitdefender disclosed the vulnerabilities to LG. |
| November 15, 2023 | LG confirmed the report. |
| March 22, 2024 | Patch release recorded in Bitdefender’s disclosure timeline. |
| April 9, 2024 | Bitdefender published its report. |
| April 18, 2024 | The report page was updated. |
The disclosure dates establish that fixes preceded public reporting; they do not identify a single fixed version applicable to every model. Use the update information for your set rather than applying one model’s firmware number to another.
Quick Recap
Rank #4
- 4k Ultra HD (2160p resolution): Enjoy breathtaking HDR10 4K movies and TV shows at 4 times the resolution of Full HD, and upscale your current content to Ultra HD-level picture quality.
- High Dynamic Range: Provides a wide range of color details and sharper contrast, from the brightest whites to the deepest blacks.
- All-in-one: Get right to your good stuff. With Fire TV, you can enjoy a world of entertainment from apps like Prime Video, Netflix, Disney+, Hulu, and HBO Max. Plus, stream for free with Fire TV Channels, Pluto TV, Tubi, and more. Access over 1.8 million movies and TV episodes. Subscriptions may be required. Feature and content availability may vary.
- Smart Home: Your smart home hub. Pair Fire TV with compatible smart home devices to see live camera feeds, use AirPlay, control your lighting and thermostat, and more.
- Free Content: Stream for free. Access over 1 million free movies and TV episodes from popular ad-supported streaming apps like Fire TV Channels, Tubi, and Pluto TV. Subscriptions may be required. Feature and content availability may vary.
Rank #3
- Complete LG 32 Inch LB65 Series bundle includes an HD LED Smart AI TV, HDMI cable, streaming bundle, and 12 Month CPS Warranty for a complete home entertainment solution.
- HD LED display delivers vibrant colors, sharp detail, and enhanced clarity for everyday television viewing, movies, sports, and streaming content.
- LG AI Processor intelligently optimizes picture and sound quality to provide an improved viewing experience across live TV, streaming services, and connected devices.
- webOS Smart TV platform offers easy access to popular streaming apps, LG Channels, personalized recommendations, and an intuitive user interface.
- Built-in WiFi and Bluetooth connectivity allow quick access to online entertainment and wireless pairing with compatible devices and accessories.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
