LG

Records66All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

LG records in CISA KEV

Products in the NVD configurations · select one to filter the records

6 records in Lg Led Assistant · all components

TI-2024-02673 CVE-2024-2863 · GHSA-v728-2v4r-c686

HIGH 84

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.63999 Published 2024-03-25 No fix listed CWE-35

TI-2024-02672 CVE-2024-2862 · GHSA-59gg-h898-v8m7

HIGH 80

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.51001 Published 2024-03-25 No fix listed CWE-287

TI-2023-04256 CVE-2023-4614 · GHSA-2h7v-9726-9jwv

MEDIUM 54

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02504 Published 2023-09-04 No fix listed CWE-22

TI-2023-04255 CVE-2023-4613 · GHSA-j848-hq92-qw4q

MEDIUM 54

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02546 Published 2023-09-04 No fix listed CWE-22

TI-2023-04258 CVE-2023-4616 · GHSA-pc6v-7w9m-q636

MEDIUM 42

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01612 Published 2023-09-04 No fix listed CWE-22

TI-2023-04257 CVE-2023-4615 · GHSA-rv3h-2ghm-9q8g

MEDIUM 42

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01612 Published 2023-09-04 No fix listed CWE-22