{"id":1544,"date":"2024-04-10T07:48:50","date_gmt":"2024-04-10T07:48:50","guid":{"rendered":"https:\/\/tastycounter.net\/index.php\/2024\/04\/10\/hon-90-000-smart-tv-lg-co-nguy-co-bi-tan-cong-tu-xa-boi-lo-hong-trong-webos\/"},"modified":"2024-04-10T07:48:50","modified_gmt":"2024-04-10T07:48:50","slug":"hon-90-000-smart-tv-lg-co-nguy-co-bi-tan-cong-tu-xa-boi-lo-hong-trong-webos","status":"publish","type":"post","link":"https:\/\/tastycounter.net\/index.php\/2024\/04\/10\/hon-90-000-smart-tv-lg-co-nguy-co-bi-tan-cong-tu-xa-boi-lo-hong-trong-webos\/","title":{"rendered":"H\u01a1n 90.000 smart TV LG c\u00f3 nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng t\u1eeb xa b\u1edfi l\u1ed7 h\u1ed5ng trong WebOS"},"content":{"rendered":"<\/p>\n<div class=\"content-detail textview\">\n<p>B\u1ed1n l\u1ed7 h\u1ed5ng trong h\u1ec7 \u0111i\u1ec1u h\u00e0nh WebOS ch\u1ea1y tr\u00ean smart TV c\u1ee7a LG \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n b\u1edfi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt Bitdefender.<\/p>\n<p>Khi khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y, tin t\u1eb7c c\u00f3 th\u1ec3 truy c\u1eadp v\u00e0 ki\u1ec3m so\u00e1t tr\u00e1i ph\u00e9p \u1edf c\u00e1c m\u1ee9c \u0111\u1ed9 kh\u00e1c nhau tr\u00ean TV b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n<p style=\"text-align:right\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/st.quantrimang.com\/photos\/image\/holder.png\" alt=\"TV Smart LG\" width=\"700\" height=\"366\" class=\"lazy\" data-src=\"https:\/\/st.quantrimang.com\/photos\/image\/2024\/04\/10\/smart-tv-lg-700.jpg\"><\/p>\n<p>Hacker c\u00f3 th\u1ec3 khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y v\u00e0 s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 ch\u1ea1y tr\u00ean c\u1ed5ng 3000\/3001, hi\u1ec7n \u0111\u01b0\u1ee3c d\u00f9ng \u0111\u1ec3 k\u1ebft n\u1ed1i \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh b\u1eb1ng m\u00e3 PIN, \u0111\u1ec3 t\u1ea1o t\u00e0i kho\u1ea3n t\u00f9y \u00fd tr\u00ean thi\u1ebft b\u1ecb.<\/p>\n<p>B\u1ed1n l\u1ed7 h\u1ed5ng tr\u00ean smart TV c\u1ee7a LG \u0111\u01b0\u1ee3c nh\u00f3m nghi\u00ean c\u1ee9u \u0111\u01b0a ra g\u1ed3m:<\/p>\n<ul>\n<li>CVE-2023-6317: Cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng b\u1ecf qua c\u01a1 ch\u1ebf ph\u00e2n quy\u1ec1n c\u1ee7a TV v\u00e0 th\u00eam ng\u01b0\u1eddi d\u00f9ng m\u00e0 kh\u00f4ng c\u1ea7n \u0111\u1ebfn s\u1ef1 \u0111\u1ed3ng \u00fd c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/li>\n<li>CVE-2023-6318: Gi\u00fap tin t\u1eb7c gi\u00e0nh quy\u1ec1n truy c\u1eadp root sau khi th\u1ef1c hi\u1ec7n CVE-2023-6317.<\/li>\n<li>CVE-2023-6319: Ch\u00e8n l\u1ec7nh v\u00e0o h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u00e0 th\u1ef1c thi l\u1ec7nh t\u00f9y \u00fd.<\/li>\n<li>CVE-2023-6320: Khai th\u00e1c API \u0111\u1ec3 th\u1ef1c thi l\u1ec7nh v\u1edbi t\u01b0 c\u00e1ch l\u00e0 ng\u01b0\u1eddi d\u00f9ng dbus, m\u1ed9t quy\u1ec1n t\u01b0\u01a1ng t\u1ef1 root.<\/li>\n<\/ul>\n<p>Theo Bitdefender, c\u00f3 kho\u1ea3ng 91.000 thi\u1ebft b\u1ecb LG d\u00ednh l\u1ed7 h\u1ed5ng. C\u00e1c phi\u00ean b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng g\u1ed3m:<\/p>\n<div id=\"articleads\" class=\"adbox adsense in-article\"><ins class=\"adsbygoogle\" style=\"text-align:center\" data-ad-format=\"fluid\" data-ad-layout=\"in-article\" data-ad-client=\"ca-pub-9275417305531302\" data-ad-slot=\"2079243249\"><\/ins><\/div>\n<ul>\n<li>WebOS 4.9.7 &#8211; 5.30.40 ch\u1ea1y tr\u00ean d\u00f2ng TV 43UM7000PLA<\/li>\n<li>WebOS 04.50.51 &#8211; 5.5.0 tr\u00ean TV OLED55CXPUA.<\/li>\n<li>WebOS 0.36.50 &#8211; 6.3.3-442 tr\u00ean OLED48C1PUB.<\/li>\n<li>WebOS 03.33.85 &#8211; 7.3.1-43 tr\u00ean OLED48C1PUB, OLED55A23LA.<\/li>\n<\/ul>\n<p>Bitdefender cho bi\u1ebft \u0111\u00e3 b\u00e1o cho LG sau khi ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng cu\u1ed1i n\u0103m ngo\u00e1i. Tuy v\u1eady, ph\u1ea3i \u0111\u1ebfn cu\u1ed1i th\u00e1ng 3, LG m\u1edbi ra b\u1ea3n c\u1eadp nh\u1eadt \u0111\u1ea7u ti\u00ean \u0111\u1ec3 kh\u1eafc ph\u1ee5c. Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 v\u00e0o C\u00e0i \u0111\u1eb7t &gt; H\u1ed7 tr\u1ee3 &gt; C\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m &gt; Ki\u1ec3m tra c\u1eadp nh\u1eadt.<\/p>\n<p>LG hi\u1ec7n ch\u01b0a \u0111\u01b0a ra b\u00ecnh lu\u1eadn n\u00e0o.<\/p>\n<p>Theo Bleeping Computer, k\u1ebb x\u1ea5u c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt tr\u00ean TV l\u00e0m \u0111i\u1ec3m t\u1ea5n c\u00f4ng thi\u1ebft b\u1ecb kh\u00e1c k\u1ebft n\u1ed1i c\u00f9ng m\u1ed9t m\u1ea1ng, \u0111\u00e1nh c\u1eafp nh\u1eefng t\u00e0i kho\u1ea3n tr\u1ef1c tuy\u1ebfn, v\u00e0 l\u00e0m botnet (m\u1ea1ng m\u00e1y t\u00ednh ma) cho ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng t\u1eeb ch\u1ed1i d\u1ecbch v\u1ee5 DDoS ho\u1eb7c b\u1ecb \u00e2m th\u1ea7m c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m \u0111\u00e0o ti\u1ec1n s\u1ed1.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>B\u1ed1n l\u1ed7 h\u1ed5ng trong h\u1ec7 \u0111i\u1ec1u h\u00e0nh WebOS ch\u1ea1y tr\u00ean smart TV c\u1ee7a LG \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n b\u1edfi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt Bitdefender. Khi khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y, tin t\u1eb7c c\u00f3 th\u1ec3 truy c\u1eadp v\u00e0 ki\u1ec3m so\u00e1t tr\u00e1i ph\u00e9p \u1edf c\u00e1c m\u1ee9c \u0111\u1ed9 kh\u00e1c nhau tr\u00ean TV b\u1ecb \u1ea3nh h\u01b0\u1edfng. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1545,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1544","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-khong-phan-loai"],"_links":{"self":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/1544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/comments?post=1544"}],"version-history":[{"count":0,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/1544\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media\/1545"}],"wp:attachment":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media?parent=1544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/categories?post=1544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/tags?post=1544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}