Security researchers from ReVuln recently published a video demonstrating how cybercriminals can compromise certain Philips smart HDTVs, giving criminals the ability to remotely control the TV and conduct other actions.
"The main problem is that Miracast uses a fixed password, doesn't show a PIN number to insert and, moreover, doesn't ask permission to allow the incoming connection," said Luigi Auriemma, ReVuln CEO and security researcher, in an interview with SCMagazine. "So basically you just connect directly to the TV via Wi-Fi, without restrictions. Miracast is enabled by default and the password cannot be changed."
When the TV owner browses the Web using their HDTV, criminals are able to view cookies and browsing history, researchers noted.
Philips, one of the largest electronic manufacturers in the world, has a growing smart TV collection, and will have to scramble to fix this security loophole.