Incorrect HTTPS Certificate Validation in Samsung Smart TVs

Autor	Ghiglieri, Marco
Datum	2014
Art	Report
Abstrakt	TVs with Internet functionalities, which are commonly called Smart TVs, are gaining more and more popularity and can soon be found in every household. Some of these devices have integrated web browsers that enable consumers to browse the Internet. This technical report shows how important correctly implemented security features are and uncovers security issues in web browsers on Samsung Smart TVs. These issues have been found on the E series (models from 2012) and F series (models from 2013) of the Samsung Smart TV devices. In April 2014 Samsung distributed a patch for these devices. The older model UE55D6500 (a 2011 model) still does not validate HTTPS certificates properly. Furthermore, the work shows that a proper update strategy is becoming more and more important, even on smart entertainment devices.
Schlüssel	TUD-CS-2014-0092
Url	https://tubiblio.ulb.tu-darmstadt.de/id/eprint/104234

Cybersecurity-Konferenzen