{"uuid": "3f4a59e6-61ef-4b4c-bb57-07f721f9db14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "title": "LG TV discovery traffic and CVE-2026-13230 \u2014 a possible interaction with CVE-2026-9770?", "description": "There is an interesting connection between this vulnerability and CVE-2026-13230, which affects the same TP-Link Kasa EC70/EC71 devices.\n\nRecent research indicates that LG TVs send UDP/9999 discovery broadcasts approximately every 25 seconds. UDP/9999 is also used by the Kasa local discovery mechanism affected by CVE-2026-13230, which can disclose precise GPS coordinates without authentication.\n\nThis suggests that, on a local network containing both an LG TV and an unpatched Kasa EC70/EC71, the TV's periodic discovery traffic may trigger the vulnerable Kasa discovery response and expose the camera's stored geolocation information.\n\nThe two issues are distinct: CVE-2026-9770 concerns a hardcoded cryptographic private key, while CVE-2026-13230 concerns sensitive information disclosure through the local discovery mechanism. However, the shared UDP/9999 discovery traffic is worth investigating as a potential interaction between the two vulnerabilities.\n\nReference: [https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md](https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md)", "description_format": "markdown", "vulnerability": "CVE-2026-9770", "creation_timestamp": "2026-09-08T11:58:09.107704+00:00", "timestamp": "2026-09-08T21:30:10.830811+00:00", "related_vulnerabilities": ["CVE-2026-9770", "CVE-2026-13230"], "meta": [{"tags": ["vulnerability:exploitability=theoretical", "vulnerability:information=annotation", "vulnerability:origin=software"]}], "author": {"login": "cedric", "name": "C\u00e9dric Bonhomme", "uuid": "af0120d0-3dac-4a6a-974b-a9f33d2a9846"}}