LG OLED55CXPUA
From Wiki-IoT
| LG OLED55CXPUA | ||
|---|---|---|
|
Security Grade
Calculator v1
|
LG OLED55CXPUA
Brand: LG (Parent: LG Electronics) Category: Smart TV • Model / Gen: OLED55CXPUA (webOS 5) Release Date: 2020-01-01 • Status: In sale Classification Date: 2026-10-21 • [www.lg.com/ Official Website] | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | [www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/ 🔗 Proof] | No mass physical-tampering campaign; findings are remote/network. |
| Known vulnerabilities | Very common | [www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/ 🔗 Proof] | Bitdefender disclosed four flaws (CVE-2023-6317, -6318, -6319, -6320) chained for unauthenticated root access: PIN-bypass account creation, privilege escalation to root, and OS command injection via the lyrics library and connectionmanager service. Over 91,000 exposed devices found on Shodan. |
| Prior attacks | Rare | [www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/ 🔗 Proof] | Patched before public disclosure; no known mass exploitation. |
| Updatability | Very common | [www.lg.com/ 🔗 Proof] | webOS updates delivered automatically; LG patched the flaws in March 2024. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | [www.lg.com/ 🔗 Proof] | ThinQ account and streaming-service integrations; LAN service (ports 3000/3001) used for the ThinQ app. |
| Communications | Encrypted with up-to-date encryption | [www.lg.com/ 🔗 Proof] | Cloud/streaming traffic uses TLS. |
| Storage | Encrypted with obselete encryption | [www.lg.com/ 🔗 Proof] | On-device storage protections not clearly documented; legacy protections assumed. |
| Category Score | Score: 2 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | [www.lg.com/ 🔗 Proof] | LG account with profiles and ThinQ device management. |
| Authentication | Basic | [www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/ 🔗 Proof] | PIN verification for the ThinQ service could be bypassed (CVE-2023-6317). |
| Brute-force protection | Basic | [www.lg.com/ 🔗 Proof] | No documented local PIN/account lockout policy. |
| Event logging | Partial logging | [www.lg.com/ 🔗 Proof] | Usage/logs available via diagnostics; authentication events not exposed as an audit trail. |
| Passwords | Require change after setup with complexity requirements | [www.lg.com/ 🔗 Proof] | LG account password has complexity requirements; no default TV password. |
| Category Score | Score: 2 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | webOS 5 (Companion App: LG ThinQ) |
| Hardware (CPU / GPU) | CPU: Not publicly specified • GPU: N/A |
| Memory & Storage | Memory: Not publicly specified • Storage: Not publicly specified |
| Power, Battery & Charging | Battery: N/A • Power: AC mains • Charging: N/A |
| Display & Camera | Display: 55-inch 4K OLED • Camera: N/A |
| Sound & Connectivity | Sound: Integrated speakers • Connectivity: Wi-Fi 2.4/5 GHz, Ethernet, Bluetooth |
| Physical (Dimensions & Mass) | Dimensions: Approx. 1228 x 738 x 251 mm (with stand) • Mass: Approx. 19.0 kg (with stand) |
