Skip to content
OpenAdvisories

Vendor

LG Electronics

24 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-2862 Scanner template EPSS 51%

    Password reset vulnerability without authorization on LG LED Assistant

    This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.

  • Critical 9.8

    setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. Th…

  • Critical 9.8

    Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue resu…