Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA webOS 5.5.0 - 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 5 products
@buhaimedi صحيح انا مجرب الثغره على شاشتي وصدار الثغرات CVE ( CVE-2023-6317 - CVE-2023-6320 ) وكيف تحل المشكله وتقفل الثغرة باستخدام الطريقه ذي اذهب إلى: الإعدادات (Settings) > الدعم (Support) > تحديث البرامج (Software Update) واضغط على التحقق من وجود تحديثات (Check for Updates)
Post summary
The user has tested the CVEs on their device and recommends applying the software update to remediate the identified flaw.
Major warning: LG webOS TVs (versions 4-7) contain graves vulnerabilities (CVE-2023-6317-6320) that allow remote root access without PIN. Command injection flaws plus authentication bypass let attackers gain full control over LG sets—including installing software, changing settings, or using the TV as a network foothold. Affects 91,000+ devices exposed online; keep firmware updated and avoid port-forwarding. #SecurityNews #LGwebOS #Vulnerability #IoTSecurity #RootAccess #CyberAttack https://thedailytechfeed.com/devastating-lg-webos-flaws-let-remote-attackers-gain-root-access/
Post summary
The text describes LG webOS vulnerabilities that can enable remote root access through command injection and authentication bypass. It recommends keeping firmware updated and avoiding port-forwarding.
8 of 8 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | lg | lg43um7000pla | - | - | - |
| HW | lg | oled48c1pub | - | - | - |
| HW | lg | oled55a23la | - | - | - |
| HW | lg | oled55cxpua | - | - | - |
| OS | lg | webos | 4.9.7 | - | - |
| OS | lg | webos | 5.5.0 | - | - |
| OS | lg | webos | 6.3.3-442 | - | - |
| OS | lg | webos | 7.3.1-43 | - | - |