Lg vulnerabilities, page 4

66 vulnerabilities

Known vulnerabilities in Lg products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 46 products.

9.8CriticalCVE-2023-4614lg electronics · lg-led assistant +1 moresetThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read VulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user.EPSS2.50%7.5HighCVE-2023-4615lg electronics · lg-led assistant +1 moreupdateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read VulnerabilityThis vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of the current user.EPSS1.61%9.1CriticalCVE-2023-6319lg · webosCommand injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager serviceA command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability. * webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA  * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA  * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB  * webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LAEPSS6.44%9.1CriticalCVE-2023-6318lg · webosCommand injection in the processAnalyticsReport method from the com.webos.service.cloudupload serviceA command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability. Full versions and TV models affected: * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA  * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB  * webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LAEPSS4.67%9.1CriticalCVE-2023-6320lg · webosCommand injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpointA command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this vulnerability. Full versions and TV models affected: * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA  * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUBEPSS3.92%9.8CriticalCVE-2023-6317lg · webosPIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interactionA prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN.  Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA webOS 5.5.0 - 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB   webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LAEPSS1.08%