Lg vulnerabilities
66 vulnerabilities
Known vulnerabilities in Lg products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 46 products.
Products
46- Simple Editor25 vulnerabilities
- Supersign Cms8 vulnerabilities
- Webos8 vulnerabilities
- Lg Led Assistant6 vulnerabilities
- Supersign Media Editor2 vulnerabilities
- Webos Signage2 vulnerabilities
- Bridge1 vulnerabilities
- Gamp 71001 vulnerabilities
- Gapm 72001 vulnerabilities
- Gapm 80001 vulnerabilities
- Ipsfullhd1 vulnerabilities
- L 03E1 vulnerabilities
- L 04D1 vulnerabilities
- L 09C1 vulnerabilities
- Lg Mobile1 vulnerabilities
- Lg Ultrawide1 vulnerabilities
- Lgpcsuite Setup1 vulnerabilities
- Lha.Sys1 vulnerabilities
- Lnb51101 vulnerabilities
- Lnb53201 vulnerabilities
- Lnb5320R1 vulnerabilities
- Lnb72101 vulnerabilities
- Lnd3230R1 vulnerabilities
- Lnd51101 vulnerabilities
- Lnd5110R1 vulnerabilities
- Lnd5220R1 vulnerabilities
- Lnd72101 vulnerabilities
- Lnd7210R1 vulnerabilities
- Lnu3230R1 vulnerabilities
- Lnu5110R1 vulnerabilities
- Lnu5320R1 vulnerabilities
- Lnu7210R1 vulnerabilities
- Lnv5110R1 vulnerabilities
- Lnv5320R1 vulnerabilities
- Lnv72101 vulnerabilities
- Lnv7210R1 vulnerabilities
- N1A11 vulnerabilities
- N1T11 vulnerabilities
- Nexus 51 vulnerabilities
- On Screen Phone1 vulnerabilities
- Optimus G E9731 vulnerabilities
- Pc Suite1 vulnerabilities
- Prada Phone L 02D1 vulnerabilities
- Smart Share1 vulnerabilities
- Ultra Hd Driver Setup1 vulnerabilities
- N1A1 NAS0 vulnerabilities
CVE-2018-16706lgsupersign_cms
EPSS score22.33%
LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.CVE-2018-16286lgsupersign_cmsEPSS score21.55%
LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.CVE-2018-16287lgsupersign_cmsEPSS score19.59%
LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.CVE-2018-16946lglnb5110_firmware+17EPSS score9.35%
LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) files and download backup files (via download.php) without authenticating. These backup files contain user credentials and configuration information for the camera device. An attacker is able to discover the backup filename via reading the system logs or report data, or just by brute-forcing the backup filename pattern. It may be possible to authenticate to the admin account with the admin password.CVE-2018-16288lgsupersign_cmsEPSS score35.83%
LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.CVE-2018-14839lgn1a1_firmwareKEVEPSS score89.35%
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.CVE-2018-17173lgsupersign_cmsEPSS score56.24%
LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.CVE-2018-10229chainguardchromium+6EPSS score0.57%
A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.CVE-2013-3666googleandroid+1EPSS score0.20%
The LG Hidden Menu component for Android on the LG Optimus G E973 allows physically proximate attackers to execute arbitrary commands by entering USB Debugging mode, using Android Debug Bridge (adb) to establish a USB connection, dialing 3845#*973#, modifying the WLAN Test Wi-Fi Ping Test/User Command tcpdump command string, and pressing the CANCEL button.CVE-2021-38306lgn1t1_firmwareEPSS score8.96%
Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.php destServer parameter.CVE-2016-10135lglg_mobileEPSS score0.93%
An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has application components that are accessible to any application that resides on the device. Namely, the com.mediatek.mtklogger.framework.LogReceiver and com.mediatek.mtklogger.framework.MTKLoggerService application components are exported since they contain an intent filter, are not protected by a custom permission, and do not explicitly set the android:exported attribute to false. Therefore, these components are exported by default and are thus accessible to any third party application by using android.content.Intent object for communication. These application components can be used to start and stop the logs using Intent objects with embedded data. The available logs are the GPS log, modem log, network log, and mobile log. The base directory that contains the directories for the 4 types of logs is /sdcard/mtklog which makes them accessible to apps that require the READ_EXTERNAL_STORAGE permission. The GPS log contains the GPS coordinates of the user as well as a timestamp for the coordinates. The modem log contains AT commands and their parameters which allow the user's outgoing and incoming calls and text messages to be obtained. The network log is a tcpdump network capture. The mobile log contains the Android log, which is not available to third-party apps as of Android 4.1. The LG ID is LVE-SMP-160019.CVE-2020-9759debianweechat+2EPSS score0.47%
A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.CVE-2020-7807lg electronics(lgpcsuite_setup), (ipsfullhd, lg_ultrawide, ultra_hd_driver setup)+4EPSS score0.19%
A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) installation into a DLL file that the hacker wants. Missing Support for Integrity Check vulnerability in ____COMPONENT____ of LG Electronics (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup) allows ____ATTACKER/ATTACK____ to cause ____IMPACT____. This issue affects: LG Electronics; LGPCSuite_Setup : 1.0.0.3 on Windows(x86, x64); IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup : 1.0.0.9 on Windows(x86, x64).CVE-2014-7252disney_interactivedisney_mobile+4EPSS score0.38%
Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local users to execute arbitrary code or read kernel memory via unknown vectors related to userland data and "improper data validation."CVE-2014-7243lgl-03e+2EPSS score1.35%
LG Electronics Mobile WiFi router L-09C, L-03E, and L-04D does not restrict access to the web administration interface, which allows remote attackers to obtain sensitive information via unspecified vectors.CVE-2014-8757lgon-screen_phoneEPSS score4.51%
LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to bypass authorization via a crafted request.CVE-2022-45422lgsmart_shareEPSS score0.20%
When LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking attack. The LG ID is LVE-HOT-220005.CVE-2022-23731lgwebosEPSS score0.63%
V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.CVE-2022-23730lgwebosEPSS score1.02%
The public API error causes for the attacker to be able to bypass API access control.CVE-2022-23727lgwebosEPSS score0.23%
There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege