CVE-2023-6318

🗓️ 09 Apr 2024 13:41:47Reported by BitdefenderType

A command injection vulnerability exists in com.webos.service.cloudupload service on webOS versions 5-7, allowing authenticated requests to execute commands as the root user

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the processAnalyticsReport method of the com.webos.service.cloudupload service in the LG WebOS operating system allows a hacker to elevate their privileges to the root level.	23 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the getAudioMetadata method of the com.webos.service.attachedstoragemanager service in the LG WebOS operating system allows a hacker to execute arbitrary commands.	23 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the service com.webos.service.connectionmanager/tv/setVlanStaticAddress in the LG WebOS operating system allows a hacker to execute arbitrary commands on behalf of the dbus user.	23 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs allows a hacker to create a privileged user account.	23 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-6318	10 Apr 202413:20	–	circl
CNNVD	LG webOS 操作系统命令注入漏洞	9 Apr 202400:00	–	cnnvd
Cvelist	CVE-2023-6318 Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service	9 Apr 202413:41	–	cvelist
EUVD	EUVD-2023-58560	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6318	9 Apr 202414:15	–	nvd
Positive Technologies	PT-2023-9035	1 Nov 202300:00	–	ptsecurity

NVD

Node

lg webosMatch5.5.0

AND

lg oled55cxpuaMatch-

Node

lg webosMatch6.3.3-442

AND

lg oled48c1pubMatch-

Node

lg webosMatch7.3.1-43

AND

lg oled55a23laMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "webOS",
    "vendor": "LG",
    "versions": [
      {
        "status": "affected",
        "version": "5.5.0"
      },
      {
        "status": "affected",
        "version": "6.3.3-442"
      },
      {
        "status": "affected",
        "version": "7.3.1-43 "
      }
    ]
  }
]

Source	Link
lgsecurity	www.lgsecurity.lge.com/bulletins/tv
bitdefender	www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/

17 Jun 2026 06:50Current

9.4High risk

Vulners AI Score9.4

CVSS 3.17.2 - 9.1

EPSS0.04667

SSVC

CWE-78