LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

LG Smart TVs have been found to be vulnerable to a root takeover from the local network due to three vulnerabilities in the webOS system. An attacker on the same network can exploit these vulnerabilities to gain root access without needing a PIN or any interaction from the TV's owner. The vulnerabilities were tested on two specific TV models running webOS 7.5.7-25 on certain firmware. LG has released a fix for the issue, as announced in an advisory published by SSD Secure Disclosure. The fix is intended to prevent unauthorized access to the affected smart TVs.