Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

Multiple vulnerabilities (CVE-2023-6317–CVE-2023-6320) in LG webOS for smart televisions — including PIN bypass, privilege escalation to root, command injection in a lyrics library, and authenticated command injection via a VLAN API — were disclosed by Bitdefender and fixed by LG on March 22, 2024; Shodan identified roughly 91,000 devices exposing the affected service to the Internet, widening the potential attack surface.