Skip to content
OpenAdvisories

Product · LG

webOS

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-6320

    Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint

    A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authent…

    LG webOS
  • Critical 9.1
    CVE-2023-6319 Public exploit

    Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service

    A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker …

    LG webOS
  • Critical 9.1
    CVE-2023-6318

    Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service

    A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can m…

    LG webOS