Vendor
LG Electronics
24 known vulnerabilities.
Products
4 results · Clear filters · Feed
-
High 7.1
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics Sm…
-
High 7.1CVE-2025-10204 Scanner template
Unauth Admin Reset Password on AC Smart II
A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization. This page contains a hidden form for resetting the administrator password. The attacker can manipulate the page using developer tools to display and use t…
-
High 7.5
thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue re…
-
High 7.5
updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. Th…