lg vulnerabilities

Recent CVEs affecting lg products. 38 tracked.

lg has 38 tracked vulnerabilities, 17 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-06-20. Highest priority: CVE-2023-40504 (score 72/100).

• CVE-2024-6179 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Elect
• CVE-2024-6178 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Elect
• CVE-2024-6177 MEDIUM 6.1 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in L
• CVE-2024-2863 MEDIUM 5.3 DOWNGRADE This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.
• CVE-2024-2862 CRITICAL 9.1 DOWNGRADE This vulnerability allows remote attackers to reset the password of anonymous users without authorization on
• CVE-2024-1886 LOW 3.0 DOWNGRADE This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
• CVE-2024-1885 MEDIUM 6.3 DOWNGRADE This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.
• CVE-2023-6320 CRITICAL 9.1 MITIGATE A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress en
• CVE-2023-6319 CRITICAL 9.1 MITIGATE A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedsto
• CVE-2023-6318 CRITICAL 9.1 MITIGATE A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloud
• CVE-2023-6317 HIGH 7.2 MITIGATE A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7
• CVE-2023-41181 MEDIUM 5.3 DOWNGRADE LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40517 HIGH 7.5 DOWNGRADE LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerabi
• CVE-2023-40516 HIGH 7.8 DOWNGRADE LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability
• CVE-2023-40515 HIGH 7.5 DOWNGRADE LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability
• CVE-2023-40514 MEDIUM 6.5 DOWNGRADE LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerabi
• CVE-2023-40513 MEDIUM 6.5 DOWNGRADE LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerabil
• CVE-2023-40512 MEDIUM 6.5 DOWNGRADE LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40511 HIGH 7.5 DOWNGRADE LG Simple Editor checkServer Authentication Bypass Vulnerability
• CVE-2023-40510 HIGH 7.5 DOWNGRADE LG Simple Editor getServerSetting Authentication Bypass Vulnerability
• CVE-2023-40509 CRITICAL 9.1 DOWNGRADE LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40508 CRITICAL 9.1 DOWNGRADE LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40507 HIGH 7.5 DOWNGRADE LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-40506 HIGH 7.5 DOWNGRADE LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-40505 CRITICAL 9.8 DOWNGRADE LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability
• CVE-2023-40504 CRITICAL 9.8 DOWNGRADE LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability
• CVE-2023-40503 HIGH 7.5 DOWNGRADE LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability
• CVE-2023-40502 CRITICAL 9.1 DOWNGRADE LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40501 CRITICAL 9.8 DOWNGRADE LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
• CVE-2023-40500 CRITICAL 9.8 DOWNGRADE LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
• CVE-2023-40499 CRITICAL 9.1 DOWNGRADE LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40498 CRITICAL 9.8 DOWNGRADE LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-40497 CRITICAL 9.8 DOWNGRADE LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-40496 HIGH 7.5 DOWNGRADE LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40495 HIGH 7.5 DOWNGRADE LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability
• CVE-2023-40494 CRITICAL 9.1 DOWNGRADE LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability
• CVE-2023-40493 CRITICAL 9.8 DOWNGRADE LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability
• CVE-2023-40492 CRITICAL 9.1 DOWNGRADE LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability

FAQ

How do I fix lg vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lg being exploited right now?

None of the tracked lg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lg CVE should I patch first?

CVE-2023-40504 currently ranks highest (72/100): LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability.

Products

• lg led assistant
• simple editor
• supersign cms
• supersign media editor
• webos
• webos signage

RSS feed for lg · ← Back to latest CVEs