Vulnerabilities

TI-2024-05728 CVE-2024-6179 · GHSA-9wjg-c56j-xw9f

XSS vulnerability in LG SuperSign CMS

LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79

TI-2024-05727 CVE-2024-6178 · GHSA-85x5-7hjw-hj56

XSS vulnerability in LG SuperSign CMS

LOW 22

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79

TI-2024-05726 CVE-2024-6177 · GHSA-v29v-mr8q-2gqr

XSS vulnerability in LG SuperSign CMS

LOW 22

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS.

CVSS 4.0MEDIUM 4.8 Adjacent network No auth User interaction EPSS 0.00253 Published 2024-06-20 Fixed in < 4.3.1 CWE-79

TI-2018-12273 CVE-2018-17173 · GHSA-qgg8-99p6-v8v8

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri…

HIGH 75

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.56513 Published 2018-09-21 No fix listed CWE-94

TI-2018-11959 CVE-2018-16706 · GHSA-9qcg-phmc-6j9q

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct…

MEDIUM 53

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.22333 Published 2018-09-14 No fix listed CWE-425

TI-2018-11667 CVE-2018-16288 · GHSA-xgwj-62j7-h8hh

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

MEDIUM 63

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.35828 Published 2018-09-14 No fix listed CWE-200

TI-2018-11666 CVE-2018-16287 · GHSA-7pg5-mv3h-mmc4

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

MEDIUM 60

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.19587 Published 2018-09-14 No fix listed CWE-434

TI-2018-11665 CVE-2018-16286 · GHSA-qc57-qhfx-p8p2

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped…

MEDIUM 61

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.21545 Published 2018-09-14 No fix listed CWE-287

Vulnerabilities

Filters