Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
D13H4RD

LG phones affected by Update Center security flaw

Recommended Posts

Posted · Original PosterOP

There's a security flaw dug up by SEARCH-LAB, which found a potentially serious security flaw on LG's update center app installed on many LG devices, including LG's current flagship, the G4.

 

According to them,

 

"The Update Center application communicates with the host www.lgcpm.com through HTTPS. However, the SSL certificate of the server is not verified by the Update Center application at all, thus the connection can be hijacked by a man-in-the-middle attack.

Since new applications and/or application upgrades are installed through this channel in APK form without the need for any additional confirmation from the user, a malicious attacker can abuse the functionality to install arbitrary applications into the victim smart phones. These applications might use any permission (except the ones requiring signature by system key), effectively circumventing Android’s own platform security." 

 

There's no word on a fix yet from LG, other than a statement saying that they are considering a fix for newer models that run Android Lollipop.

 

Since there's no fix currently available, they recommend turning off auto-update in the LG Update Center app and only updating LG apps when in a secured and trusted network, like your home network.

 

Link to article: http://www.search-lab.hu/about-us/news/109-security-vulnerability-in-lg-s-update-center-application


Please tag me if you need assistance or if you want me to contribute to a topic 

 

ASUS RoG STRIX GL502VM

Intel Core i7 7700HQ | GeForce GTX 1060 6GB | 16GB DDR4-2133 | 128GB SanDisk M.2 SATA SSD + 1TB 7200RPM Hitachi HDD | 15.6" 1080p IPS monitor @ 60Hz w/ G-SYNC | Windows 10 64-bit

 

Samsung Galaxy Note8 SM-N950F

Exynos 8895 (4x Mongoose @ 2.3GHz, 4x Cortex A53 @ 1.7GHz)ARM Mali G71 MP20 | 6GB LPDDR4 | 64GB Samsung NAND flash w/ UFS 2.1 dual-lane controller + 128GB SanDisk C10 UHS-I microSD | 6.3" 1440p "Infinity Display" AMOLED | Android Nougat 7.1.1 w/ Samsung Experience 8.5

Link to post
Share on other sites

Another reminder of why bloat is bad.


If you want to reply back to me or someone else USE THE QUOTE BUTTON!                                                      
Pascal laptops guide

Link to post
Share on other sites
Posted · Original PosterOP

Another reminder of why bloat is bad.

Well, it's not really bloat. Just a calculator, clock and some basic stuff.

 

If you're running a custom ROM, you're fine.


Please tag me if you need assistance or if you want me to contribute to a topic 

 

ASUS RoG STRIX GL502VM

Intel Core i7 7700HQ | GeForce GTX 1060 6GB | 16GB DDR4-2133 | 128GB SanDisk M.2 SATA SSD + 1TB 7200RPM Hitachi HDD | 15.6" 1080p IPS monitor @ 60Hz w/ G-SYNC | Windows 10 64-bit

 

Samsung Galaxy Note8 SM-N950F

Exynos 8895 (4x Mongoose @ 2.3GHz, 4x Cortex A53 @ 1.7GHz)ARM Mali G71 MP20 | 6GB LPDDR4 | 64GB Samsung NAND flash w/ UFS 2.1 dual-lane controller + 128GB SanDisk C10 UHS-I microSD | 6.3" 1440p "Infinity Display" AMOLED | Android Nougat 7.1.1 w/ Samsung Experience 8.5

Link to post
Share on other sites
Posted · Original PosterOP

I have a G3. :(

If you're running the stock ROM, turn off auto-update and only update those apps in trusted and secured Wi-Fi hotspots, like your home.

 

It's a network security flaw that can only be done on unprotected networks.


Please tag me if you need assistance or if you want me to contribute to a topic 

 

ASUS RoG STRIX GL502VM

Intel Core i7 7700HQ | GeForce GTX 1060 6GB | 16GB DDR4-2133 | 128GB SanDisk M.2 SATA SSD + 1TB 7200RPM Hitachi HDD | 15.6" 1080p IPS monitor @ 60Hz w/ G-SYNC | Windows 10 64-bit

 

Samsung Galaxy Note8 SM-N950F

Exynos 8895 (4x Mongoose @ 2.3GHz, 4x Cortex A53 @ 1.7GHz)ARM Mali G71 MP20 | 6GB LPDDR4 | 64GB Samsung NAND flash w/ UFS 2.1 dual-lane controller + 128GB SanDisk C10 UHS-I microSD | 6.3" 1440p "Infinity Display" AMOLED | Android Nougat 7.1.1 w/ Samsung Experience 8.5

Link to post
Share on other sites

Another reminder of why bloat is bad.

It's not bloat. The Update Center is just the OTA updating software for LG phones. It provides OS updates, as well as other LG application updates (calculator,calendar, remote, QuickMemo, radio and I think there's also a backup app).


i5 4670k @ 4.2GHz (Coolermaster Hyper 212 Evo); ASrock Z87 EXTREME4; 8GB Kingston HyperX Beast DDR3 RAM @ 2133MHz; Asus DirectCU GTX 560; Super Flower Golden King 550 Platinum PSU;1TB Seagate Barracuda;Corsair 200r case. 

Link to post
Share on other sites

It's not bloat. The Update Center is just the OTA updating software for LG phones. It provides OS updates, as well as other LG application updates (calculator,calendar, remote, QuickMemo, radio and I think there's also a backup app).

I thought it was something else, I feel so smart today, it even says Update on its name....... 


If you want to reply back to me or someone else USE THE QUOTE BUTTON!                                                      
Pascal laptops guide

Link to post
Share on other sites
Posted · Original PosterOP

I never use open wifi, ever. I preach this to everyone I can at work/daily life. It is just bad. Wait till you get home, or get a better data plan. 

I always use LTE data, even if there's open Wi-Fi next to me.

 

I only buy stuff on the Play Store or any other store on secured, trusted networks, especially my home network. 

 

I never do that stuff on open Wi-Fi, because you never know what might happen.


Please tag me if you need assistance or if you want me to contribute to a topic 

 

ASUS RoG STRIX GL502VM

Intel Core i7 7700HQ | GeForce GTX 1060 6GB | 16GB DDR4-2133 | 128GB SanDisk M.2 SATA SSD + 1TB 7200RPM Hitachi HDD | 15.6" 1080p IPS monitor @ 60Hz w/ G-SYNC | Windows 10 64-bit

 

Samsung Galaxy Note8 SM-N950F

Exynos 8895 (4x Mongoose @ 2.3GHz, 4x Cortex A53 @ 1.7GHz)ARM Mali G71 MP20 | 6GB LPDDR4 | 64GB Samsung NAND flash w/ UFS 2.1 dual-lane controller + 128GB SanDisk C10 UHS-I microSD | 6.3" 1440p "Infinity Display" AMOLED | Android Nougat 7.1.1 w/ Samsung Experience 8.5

Link to post
Share on other sites
Posted · Original PosterOP

If you guys wanna know how, do the following (if you need to know)

 

1) Go to your device's Settings.

2) Go to "About Phone"

3) Tap "Update Center"

4) Tap "App Updates"

5) Tap the 3 dots on the top right to bring up the menu and tap "Settings"

6) Tap "Auto-update apps" and turn it off.

 

Ojx6RVxm.png c0zVXezm.png XNZyf2vm.png


Please tag me if you need assistance or if you want me to contribute to a topic 

 

ASUS RoG STRIX GL502VM

Intel Core i7 7700HQ | GeForce GTX 1060 6GB | 16GB DDR4-2133 | 128GB SanDisk M.2 SATA SSD + 1TB 7200RPM Hitachi HDD | 15.6" 1080p IPS monitor @ 60Hz w/ G-SYNC | Windows 10 64-bit

 

Samsung Galaxy Note8 SM-N950F

Exynos 8895 (4x Mongoose @ 2.3GHz, 4x Cortex A53 @ 1.7GHz)ARM Mali G71 MP20 | 6GB LPDDR4 | 64GB Samsung NAND flash w/ UFS 2.1 dual-lane controller + 128GB SanDisk C10 UHS-I microSD | 6.3" 1440p "Infinity Display" AMOLED | Android Nougat 7.1.1 w/ Samsung Experience 8.5

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×