An LG Smart TV model has been found to scan local area networks for connected devices, including smartphones and other third‑party electronics. The discovery was made by security researchers who monitored the TV’s network traffic during a routine setup. The scans occurred shortly after the TV was powered on, and the device sent out discovery packets that were visible to any network analyzer.
The scans are performed automatically as part of the TV’s firmware update process. When the TV connects to a Wi‑Fi network, it broadcasts a request to identify nearby devices. This allows the TV to populate its media library with compatible content and suggest streaming services. However, the broadcast includes the TV’s MAC address and a list of detected device types, which can be captured by anyone with access to the network.
LG’s firmware logs show that the TV sends a probe request every 30 seconds during the initial connection phase. The logs also reveal that the TV records the IP addresses of devices it discovers and stores them in a local cache for up to 90 days. The stored data is encrypted, but the encryption key is embedded in the firmware, raising concerns about potential exploitation if the TV is compromised.
The primary reason for the scans is to enhance user experience. By knowing which devices are on the network, the TV can automatically recommend compatible streaming apps and enable features such as screen mirroring. The feature is marketed as a convenience, but it also creates a data trail that can be used to profile a household’s device usage.
Security analysts warn that the data collected could be useful to attackers. If a malicious actor gains access to the local network, they could use the cached device list to target specific devices with tailored malware. Additionally, the persistent storage of device information could be leveraged for targeted advertising or surveillance by third parties.
LG has stated that the feature is optional and can be disabled in the privacy settings. However, the default configuration enables scanning, and the user interface does not clearly indicate the extent of data collection. Users must manually navigate to the network settings to turn off the feature, which may not be obvious to the average consumer.
What steps can homeowners take to reduce the TV’s visibility on their network? First, they can disable the TV’s automatic device discovery in the privacy settings. Second, placing the TV on a separate VLAN or using a guest network can isolate it from other devices. Third, monitoring network traffic with a dedicated intrusion detection system can alert users to unexpected probe requests.
Network administrators can also block the specific multicast address used by the TV for discovery packets. This will prevent the TV from broadcasting its presence, but it may also disable some of the convenience features that rely on device detection. Balancing privacy with functionality is a key challenge for consumers who rely on smart home ecosystems.