LG TV discovery traffic and CVE-2026-13230 — a possible interaction with CVE-2026-9770?
Created on 2026-09-08 11:58, updated on 2026-09-08 21:30, by Cédric BonhommeThere is an interesting connection between this vulnerability and CVE-2026-13230, which affects the same TP-Link Kasa EC70/EC71 devices.
Recent research indicates that LG TVs send UDP/9999 discovery broadcasts approximately every 25 seconds. UDP/9999 is also used by the Kasa local discovery mechanism affected by CVE-2026-13230, which can disclose precise GPS coordinates without authentication.
This suggests that, on a local network containing both an LG TV and an unpatched Kasa EC70/EC71, the TV's periodic discovery traffic may trigger the vulnerable Kasa discovery response and expose the camera's stored geolocation information.
The two issues are distinct: CVE-2026-9770 concerns a hardcoded cryptographic private key, while CVE-2026-13230 concerns sensitive information disclosure through the local discovery mechanism. However, the shared UDP/9999 discovery traffic is worth investigating as a potential interaction between the two vulnerabilities.
Related vulnerabilities
Meta
[
{
"tags": [
"vulnerability:exploitability=theoretical",
"vulnerability:information=annotation",
"vulnerability:origin=software"
]
}
]