9萬臺LG智慧電視存在漏洞，攻擊者有機會遠端執行任意命令
· 2024-04-10
LG近期針對旗下執行WebOS作業系統的智慧電視發布修補程式，發現並通報漏洞的資安業者Bitdefender指出，從而在電視上擅自增加額外的使用者；這些弱點有可能被串連利用，使得攻擊者能夠遠端執行任意命令
資安業者Bitdefender在調查LG智慧電視的安全時，發現其搭載的作業系統WebOS存在4項漏洞，並指出這些漏洞影響執行4.9.7至7.3.1等多個版本WebOS的電視，有91,938臺可從網際網路存取的電視曝險。
研究人員指出，這些漏洞可被串連利用。第1個漏洞是CVE-2023-6317，允許攻擊者繞過WebOS的授權機制，從而在電視上植入額外的使用者；第2個CVE-2023-6318為權限提升漏洞，攻擊者能藉此取得root權限，完全接管裝置；另外兩個漏洞CVE-2023-6319、CVE-2023-6320是命令注入漏洞，CVE-2023-6319涉及顯示歌詞的程式庫，而CVE-2023-6320則與特定的API端點有關。
值得留意的是，上述漏洞幾乎都是危急等級、CVSS風險評分達9.1的漏洞，僅有CVE-2023-6317為高風險等級，CVSS風險評分為7.2。對此，研究人員於去年11月通報，LG在今年3月22日發布修補程式。
热门文章
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
British gambling levy rates confirmed for each vertical
Regulation
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
