Smart TV Flaws in LG webOS and Samsung Tizen Enable Device Takeover

Researchers disclosed multiple smart TV vulnerabilities affecting LG webOS and Samsung Tizen OS, showing that consumer televisions can be compromised for deep system access. Bitdefender reported four flaws in LG webOS versions 4 through 7—CVE-2023-6317, CVE-2023-6318, CVE-2023-6319, and CVE-2023-6320—that can let attackers bypass authorization, create a privileged account, inject commands, and escalate privileges to root. The attack surface was amplified by Internet exposure: the vulnerable LG control service was intended for LAN use, but more than 91,000 devices were reportedly visible via Shodan. LG confirmed the issues after notification and released fixes before public disclosure.