We've been asked to disconnect our meeting room LG TVs from the network because they might leak information. Is there a known vulnerability behind this, or could it be a broader privacy concern?
Is there a CVE behind the request to disconnect LG TVs?
Answers
There have been reported vulnerabilities in LG webOS, but that alone doesn't establish why your organization issued this request or whether your particular displays are affected. Ask for the advisory or internal risk assessment, then check the model and software version of each display against it.
The discussion also points to concerns about monitoring and privacy terms. That's a different issue from an exploitable CVE, and either could be behind a precautionary disconnect. Without more detail from the person who issued the directive, it's hard to say.
Reply to this answer
For now, disconnect them as requested and use them as displays over HDMI where that's practical. Then check which rooms actually need network features before deciding what to reconnect. A meeting room screen often doesn't need its own connection just to show a laptop.
Reply to this answer
If the TVs do need network access, put them on a separate VLAN with only the access they require rather than on the same network as staff devices. That limits what a compromised or overly chatty device can reach, although it doesn't by itself settle the privacy question.
Reply to this answer
Check what the displays actually are before applying a webOS advisory. A meeting room might have a consumer smart TV or a commercial signage display with different software. Inventorying the model and firmware should help narrow down what applies.
Reply to this answer
Add your answer
Answers are reviewed before publication.
_k7+ledgerbox:
Also check what features depend on that connection. Casting, management, and conferencing setups may need different access.