LG webOS TVs scan your network — segment your lobby TV

Gamers Nexus published a long investigation on September 7 into what LG webOS TVs do on the network they are plugged into. The short version, per Notebookcheck's writeup of the findings: retail sets including the G5 OLED were not just phoning home with viewing data. They were enumerating the rest of the LAN.

If you have one of these hanging in a showroom, a waiting room, or a conference room, this is your problem, not a consumer-privacy story.

What actually happened

The team ran packet captures with Wireshark against retail units. What they saw: the TV discovering unrelated devices on the same network — staff phones, smartwatches — and collecting internal IP addresses, device names, nearby Wi-Fi SSIDs and signal strengths, and location data.

Two findings go further than "smart TV sends telemetry."

First, the microphone. Bench tests captured clean mic audio while the screen appeared to be off in standby. When the researchers pulled the Ethernet cable, the set kept storing voice input locally and uploaded it once the network came back. Not a live stream — a queue.

Second, Automatic Content Recognition. ACR fingerprints on-screen audio and video to log what is playing, and per the reporting it runs across inputs — so a set being used purely as a display for a laptop or a signage player is still sampling. Turning off "smart" features in the menu is not the same as turning off collection.

The researchers also say they found remote code execution bugs in webOS, currently moving through responsible disclosure. LG had not publicly responded at the time of Notebookcheck's report.

Why smart TV network access matters for your business

Most small-business networks are flat. One SSID, one subnet, everything on it: the POS terminal, the card reader, the office laptop with your accounting file, the NAS with seven years of customer records, and the 65-inch panel a vendor installed in the lobby.

A device that enumerates hostnames and IPs on that segment is building a map of your business. It does not need to exfiltrate a database to be a liability — device names alone leak your stack. And a webOS RCE on a flat network is an unauthenticated foothold behind your firewall, in a box nobody patches because nobody thinks of it as a computer.

Three things, in order of effort:

Put it on its own VLAN or a guest SSID with client isolation, with no route to the POS or file shares. If your router cannot do that, that is your actual finding — you have no segmentation at all.

Block outbound DNS and traffic from that VLAN except what the display genuinely needs. Signage players usually need one endpoint, not the open internet.

Or unplug it. A dumb panel plus a locked-down streaming stick or a Raspberry Pi running your signage loop costs less than the incident does, and you control the update path.

The general lesson: every appliance you buy is now a networked computer with its own business model, and yours is not it.

Sources: Gamers Nexus investigation, Notebookcheck.