Peneliti Temukan Celah Keamanan Serius di Smart TV Android TCL


 

Smart TV Android punya TCL nampaknya mempunyai lubang keamanan yang lumayan besar. Lubang keamanan itu kemungkinan direncanakan untuk memata-matai pemakai di penjuru dunia.


Walau begitu, permasalahan keamanan ini tidak berpengaruh pada smart TV TCL yang jalankan software Roku.


Info ini berdasar riset dari periset keamanan yang menyebutkan dianya Sick Codes dan periset lain namanya John Jackson.


"Saya dapat ucapkan, ada banyak peristiwa yang saya dan periset keamanan lain dapatkan di sejauh riset. Kami tidak yakin apa yang berlangsung," kata seorang periset dengan panggilan Sick Coes, diambil dari Tom's Guide, Senin (16/11/2020).


Ke-2 periset yang bekerja di service lisensi photo Shutterstock mendapati, mereka bisa terhubung keseluruhnya filesystem pada smart TV TCL dengan jaringan WiFi, memakai port TCP/IP yang tidak terdokumentasi.


Tidak itu saja, beberapa periset ini menyebutkan, mereka dapat menerpa file di TV. Semuanya dapat dijangkau tak perlu masukkan username, sandi, dan otorisasi apa saja.


Sela ini juga dikasih nomor CVE-2020-27403 dan CVE-2020-28055 sesudah beberapa periset memberitahu team responsif genting computer AS (US-CERT) di Carnegie Mellon University di Pittsburgh.


Faksi Tom's Guide juga memperoleh URL yang nampaknya memberi akses penuh ke metode file smart TV TCL di Zambia.


Sesudah URL itu dijangkau, orang dapat mencari directory TV pemakai lewat browser di handphone Android sampai pada akhirnya pemakai mematikan tv TCL-nya.


Menurut Sick Codes, itu cuman satu diantara demikian TV TCL di penjuru dunia yang bisa dijangkau file-nya dari internet. Dalam banyak masalah, periset perlu ada di jaringan WiFi yang serupa dengan tv untuk dapat menelusuri metode ini.


bandar slot asia dan tips jitu cara menang judi slot online Ke-2 periset mendapati satu program di TV TCL namanya Terminal Manajer Remote. Program ini mempunyai server daftar file komposisi yang nampaknya siap untuk tangani file, log, dan screenshot yang terkait dengan TV pemakai.


"Ini adalah Chinese backdoor," kata Sick Codes pada wartawan Tom's Guide.


Dalam upload website periset ada screenshot daftar server yang dipisah jadi 4 daerah. Satu untuk daerah mainland Tiongkok, satu untuk Asia Pasifik, ke-3 untuk Timur tengah, Afrika dan Eropa, dan ke-4 untuk Amerika Latin dan Amerika Utara.


Tidak terang apa server itu ditujukan untuk kirim file ke TV TCL atau terima file dari mereka.


"Saya tidak punyai jawabnya, tapi TCL tentu punyai," ucapnya.


Ke-2 periset sudah memberitahukan permasalahan ini pada pihak TCL. "Saya menekannya, kami mendapati liabilitas serius, jubir juga mengatakan dianya tidak mempunyai informasi contact ke team Keamanan, bahkan juga tidak memikir apa TCL mempunyai team keamanan," kata Sick Codes.


Tetapi, tidak perlu waktu yang lama, permasalahan juga sudah diperbarui tanpa pemberitahuan, pernyataan, atau keinginan autorisasi pemakai.


"Betul-betul pembaruan yang sembunyi-sembunyi. Mereka nampaknya login ke TV saya dan tutup port," kata Sick Codes.


Untuk mereka yang mempunyai smartTV TCL, pemakai perlu memeriksa apa TV-nya jalankan software Roku ataulah bukan. Bila Roku, tv nampaknya tidak terimbas sela ini.


Tetapi bila non-Roku, pemakai perlu pastikan jika WiFi rumah disokong dengan sandi yang kuat. Pemakai tidak bisa asal-asalan memberi izin akses WiFi pada orang asing.


Pemakai bisa juga masuk di menu administrasi router untuk hentikan akses ke piranti dalam jaringan dari internet.

Location: Indonesia

Popular posts from this blog

good collaboration with governments

Image
 Individuals dealing with the ground understand that the orangutan could be conserved. It needs determination, great partnership along with federal authorities, solid sustain coming from regional individuals, as well as assist coming from business that handle the property. When woodlands are actually preserved as well as safeguarded, as well as murder is actually quit, orangutan populaces could be stabilised. It may also enable all of them towards gradually recover as well as recolonise woodland locations where orangutans have actually disappeared previously.  Slot Judi Online Our team have to believe beyond package. For example, a great deal of initiative as well as financing goes in the direction of rescuing private orangutans, that are actually after that transferred to a much safer location where they could be rehabilitated. However while this might assist people in determined circumstances, it is actually an extremely costly as well as inefficient method towards handle th...
Read more

Is actually it real that exactly just what does not eliminate our team creates our team more powerful

Image
 It might appear that smart, solid individuals generally have actually undergone a couple of difficult attend their lifestyles. Comparative, those that have actually led an extremely protected as well as fortunate lifestyle frequently seem towards break much a lot extra quickly under stress. However is actually it truly real that some level of discomfort as well as injury can easily create our team more powerful? As well as if therefore, at exactly just what factor performs it ruin our team? Very truly terrible occasions - like mishaps or even terrorist assaults - can easily stimulate worry as well as vulnerability when faced with a risk towards lifestyle or even major trauma. Worry reactions are actually frequently much a lot extra severe if the injury is actually unsystematic as well as arbitrary. That is since the utter senselessness of the circumstance creates it challenging for people towards translate exactly just what is actually occurring about all of them. Exactly just how...
Read more

Searching for Financiers for Your Company

Image
 Angel Financiers Angel financiers are actually outdoors financiers that spend a specific quantity of money right in to your startup or even developed company. In gain, these financiers get a post in your business, as well as can easily expand their financial assets as your company expands. Certainly there certainly are actually angel financiers that focus on a variety of companies, coming from fancy technology startups towards brick-and-mortar stores. You can easily speak with a directory site of angel financiers to obtain much a lot extra info around people that may have an interest in dealing with your brand name. Slot Judi Online Startup Incubators Startup incubators are actually perfect for little startup companies. As the label suggested, these distinct neighborhoods are actually produced towards incubate recently established companies in their very early times. Frequently, incubators are actually consisted of several small companies as well as some coaches or even overviews ...
Read more