Smart TV’s seem to be suffering from IoT security problems. Once a hacker has control over the TV of an end user, he can harm the user in a variety of ways, Among many others, the TV could be used to attack further devices in the home network or to spy on the user with the TV’s camera and microphone. Once exploited the rogue code is even unaffected by device reboots and factory resets.

Scheel was commissioned by Cyber security company Oneconsult, to create the exploit which once deployed, gave full root privileges enabling the attacker to setup and SSH into the TV taking complete control of the device from anywhere in the world.

The hack works by exploiting hybrid broadcast broadband TV signals and widely known about bugs in web browsers commonly run on smart TVs, which seem run in the background almost all the time. a security consultant has found that hacking smart TVs takes nothing much more than an inexpensive DVB-T transmitter, The transmitter has to be in range of the target TV and some malicious signals. Continue reading “What’s That AccessUSB Menu In My LG SmartTV?” → Posted in Reverse Engineering Tagged accessusb, ida, ida pro, LG, smart tv, smart tv hack, smart tv hacks The TV didn’t quite start beeping in a different pattern as we’d expect in a sci-fi movie, but it did notify about a “new USB device” – and started asking for a 6-symbol service menu password instead of a 4-symbol one.

By this point, AccessUSB could safely be assumed to be a service mode dongle. A few modules referred to AccessUSB there, and one detour into investigating and explaining WebOS USB vendor lock-in implementation later, they programmed an STM32 with the same VID and PID as the mythical AccessUSB device found in relevant WebOS modules decompiled with IDA. epk format, but liberated with an open-source tool. found the WebOS firmware for the TV online, encrypted and compressed into a proprietary LG. A few service manuals hinted that there’s a service mode you could access with an adapter made out of two back-to-back PL2303 USB-UART adapters – a few female-female jumper wires later, serial prompt greeted our hacker, and entering ‘debug’ into the prompt responded with some text, among it, “Access USB is NOT opened!!!”. They noticed an “Access USB Status” entry and thought the “Access USB” part looked peculiar. In other words, a fairly regular evening. One boring evening, was looking through service menus on their LG Smart TV (Russian, Google Translate), such menus accessible through use of undocumented IR remote codes.

Hacking panasonic smart tv