New LG Vulnerability · LG WebOS TV Path Traversal, Authentication Bypass and Full Device Takeover
Source Reddit NetSec
Rated by Threat Radar
Data as of 16 Sep 2025, 11:40 UTC
What to do
AI-suggested
Given the absence of official patches, European organizations should implement compensating controls. First, isolate LG webOS TVs on segmented network zones with strict firewall rules to limit inbound and outbound traffic, preventing unauthorized access from untrusted networks. Disable or restrict remote management and second-screen features if not essential, reducing the attack surface. Monitor network traffic for unusual patterns targeting the TV's IP addresses or the secondscreen.gateway service ports. Employ network intrusion detection systems (NIDS) with signatures for path traversal attempts and anomalous file access. Regularly audit device firmware versions and vendor advisories for updates addressing this vulnerability. If feasible, replace vulnerable devices with models confirmed to be patched or less exposed. Additionally, educate IT and security teams about this vulnerability to ensure rapid response if exploitation signs emerge. Finally, consider deploying endpoint detection and response (EDR) solutions capable of monitoring smart device behaviors within the corporate network.
Description
A path traversal in LG webOS TV allows unauthenticated file downloads, leading to an authentication bypass for the secondscreen.gateway service, which could lead to a full device takeover.