Recent security researchers from the company ReVuln have published a demonstration video that demonstrates that her Smart TVs Philips are prone to cyber attacks.
According to researchers, some Philips Smart TV versions with the latest firmware upgrades, except that they leave open gates to hackers, are also vulnerable to theft of cookies.
The error comes from a device feature called Miracast, and allows the televisions to operate as a point with a hard coded WiFi password. Miracast allows nearby devices to connect to the device to receive the monitor signal, in accordance with THN..
"The main problem is that Miracast uses a fixed password, does not require a PIN and does not require permission to allow inbound login," Luigi Auriemma, CEO and security researcher at ReVuln, told SCMagazine.
The vulnerability allows an attacker within the Wi-Fi range of the device to access different functions. A potential intruder may:
- Access the TV settings files
- Access files stored on USB devices connected to the TV
- Change what the victim sees on the screen with videos or images of his choice
- Control the TV via a remote control application
- And something also important to steal cookies that contain identity data from the TV browser
"So basically you just connect directly to the TV via WiFi, without restrictions. The Miracas feature is enabled by default and the password cannot be changed, "said Luigi.
Researchers tested vulnerability in a Philips 55PFL6008S model, but believe that many 2013 models are also affected because they run with the same firmware.
Philip says: "Our experts are looking into the matter and working to find a solution. In the meantime, we encourage our customers to turn off the device's Miracast feature until the firmware is updated. ”
George is still wondering what he is doing here….
