LG

Records66All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical28CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

LG records in CISA KEV

TI-2018-10666 LG N1A1 NAS Remote Command Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Simple Editor 25 records CRITICAL Supersign Cms 8 records HIGH Webos 8 records MEDIUM Lg Led Assistant 6 records HIGH Supersign Media Editor 2 records MEDIUM Webos Signage 2 records MEDIUM Bridge 1 record LOW Gamp-7100 Firmware 1 record LOW

Records

8 records in Supersign Cms · all components

TI-2018-12273 CVE-2018-17173 · GHSA-qgg8-99p6-v8v8

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri…

HIGH 75

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.56513 Published 2018-09-21 No fix listed CWE-94

TI-2018-11667 CVE-2018-16288 · GHSA-xgwj-62j7-h8hh

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

MEDIUM 63

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.35828 Published 2018-09-14 No fix listed CWE-200

TI-2018-11665 CVE-2018-16286 · GHSA-qc57-qhfx-p8p2

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped…

MEDIUM 61

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.21545 Published 2018-09-14 No fix listed CWE-287

TI-2018-11666 CVE-2018-16287 · GHSA-7pg5-mv3h-mmc4

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

MEDIUM 60

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.19587 Published 2018-09-14 No fix listed CWE-434

TI-2018-11959 CVE-2018-16706 · GHSA-9qcg-phmc-6j9q

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct…

MEDIUM 53

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.22333 Published 2018-09-14 No fix listed CWE-425

TI-2024-05728 CVE-2024-6179 · GHSA-9wjg-c56j-xw9f

XSS vulnerability in LG SuperSign CMS

LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79

TI-2024-05727 CVE-2024-6178 · GHSA-85x5-7hjw-hj56

XSS vulnerability in LG SuperSign CMS

LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79

TI-2024-05726 CVE-2024-6177 · GHSA-v29v-mr8q-2gqr

XSS vulnerability in LG SuperSign CMS

LOW 22

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79

Open these records in search →

Critical	28
High	26
Medium	12
Low	0
No CVSS	0