Errors on mobile applications allow hackers to control LG devices

LG Electronics tried to avoid a security disaster when working with researchers to patch vulnerabilities in mobile applications that customers use to control LG smart home devices.

The vulnerability affecting LG SmartThinQ application is used to control LG's smart home devices such as ovens, dishwashers, refrigerators, washing machines, air conditioners .

This vulnerability was discovered by researchers at Israel's Check Point and reported to LG.

The vulnerability allows hackers to take over LG devices

According to researchers, an attacker can hijack into the authentication process between SmartThinQ and LG servers.

Hackers can then occupy user accounts, control the device. For example, increase the oven temperature, change the temperature in the house or spy on the device using the camera. A device with integrated camera is a dust collector LG Hom-Bot.

Errors on mobile applications allow hackers to control LG devices Picture 1
The vulnerability helps hackers control LG's smart home device that has been patched

To prove, Check Point has posted a video demonstrating how to hack SmartThinQ can allow an attacker to spy.

The good news is that this vulnerability has been fixed even if you use the old application, it is not easy to exploit this vulnerability.

The steps to exploit the vulnerability are not easy to implement if the hacker is not skilled.

There were vulnerability patches

LG updated SmartThinQ (v1.9.20 on September 29) and updated the firmware for affected smart home devices.

Check Point calls this vulnerability HomeHack and gives a detailed report here.

https://blog.checkpoint.com/2017/10/26/homehack-how-hackers-could-have-taken-control-of-lgs-iot-home-appliances/

Samuel Daniel

Update 23 May 2019

You should read it

May be interested

Warning: Cyber attacks targeting web applications increase rapidly in 2019
dawn smeaton, director of web application security at trend micro, said today's web-based applications are the new targets for hackers.
Detect spyware targeting iOS users
network security researchers have recently discovered the ios version of a phone spy application, originally designed to target android devices through applications on google play store.
Warning: Hackers can access smart speakers
now, as the trend of smart home grows, this also becomes the ideal target for hackers to exploit vulnerabilities in smart devices from refrigerators and televisions to smart speakers to perform behavior. unrighteous.
How to fix errors cannot delete apps on iPhone and iPad
the best way to free up space on iphone and ipad is to delete unnecessary applications. however, when you press and hold an application, you only see it wobbly but don't see the delete button (the x is lost). therefore, this article will guide you how to fix errors that cannot be deleted on iphone and ipad applications.
Viruses are not only a threat to computers
experts say mobile devices and smartphones are becoming more and more 'prey' of the viruses, trojans, spyware ...
Launched version of Opera Mini 6 and Opera Mobile 11
today with the explosion of applications on smartphones and tablets, internet access on these mobile devices has become more and more popular. however, the built-in web browsers do not really satisfy fastidious customers who regularly browse the web for both work and entertainment purposes.
Computers can be controlled by hackers because of YM errors
buffer overflows in two activex web components of the online messaging tool can provide an opportunity for hackers to install viruses, trojans to steal information or install backdoors to control a victim's computer.
Trojan attacks on dangerous errors in Windows
an unpatched vulnerability in windows has been confirmed by microsoft that could be exploited by hackers to take control of the new 'favored' trojan system.
The new zero-day vulnerability on Windows 10 helps hackers take control of the computer
this is a serious security vulnerability that could allow hackers to attack and gain control of computer devices.
Ways to keep mobile devices safe
according to mcafee, in the third quarter of 2014, the number of infected mobile devices exceeded 5 million. another statistic of security firm symantec in 2014 also found that 1 million of the 6.3 million mobile applications contain malware.