Vulnerabilities

TI-2024-02673 CVE-2024-2863 · GHSA-v728-2v4r-c686

Path traversal via file upload on LG LED Assistant

HIGH 84

This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.63999 Published 2024-03-25 No fix listed CWE-35

TI-2024-02672 CVE-2024-2862 · GHSA-59gg-h898-v8m7

HIGH 80

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.51001 Published 2024-03-25 No fix listed CWE-287

TI-2023-04258 CVE-2023-4616 · GHSA-pc6v-7w9m-q636

MEDIUM 42

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01612 Published 2023-09-04 No fix listed CWE-22

TI-2023-04257 CVE-2023-4615 · GHSA-rv3h-2ghm-9q8g

MEDIUM 42

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01612 Published 2023-09-04 No fix listed CWE-22

TI-2023-04256 CVE-2023-4614 · GHSA-2h7v-9726-9jwv

MEDIUM 54

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02504 Published 2023-09-04 No fix listed CWE-22

TI-2023-04255 CVE-2023-4613 · GHSA-j848-hq92-qw4q

MEDIUM 54

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02546 Published 2023-09-04 No fix listed CWE-22