CVE-2023-6318

🗓️ 09 Apr 2024 13:41:47Reported by BitdefenderType

A command injection vulnerability exists in com.webos.service.cloudupload service on webOS versions 5-7, allowing authenticated requests to execute commands as the root user

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-6318	10 Apr 202413:20	–	circl
CNNVD	LG webOS 操作系统命令注入漏洞	9 Apr 202400:00	–	cnnvd
Cvelist	CVE-2023-6318 Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service	9 Apr 202413:41	–	cvelist
EUVD	EUVD-2023-58560	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6318	9 Apr 202414:15	–	nvd
Positive Technologies	PT-2023-9035	1 Nov 202300:00	–	ptsecurity
Positive Technologies	PT-2023-9036	1 Nov 202300:00	–	ptsecurity
Positive Technologies	PT-2023-9037	1 Nov 202300:00	–	ptsecurity
Positive Technologies	PT-2023-9038	1 Nov 202300:00	–	ptsecurity
The Hacker News	Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access	9 Apr 202413:05	–	thn

NVD

Node

lg webosMatch5.5.0

AND

lg oled55cxpuaMatch-

Node

lg webosMatch6.3.3-442

AND

lg oled48c1pubMatch-

Node

lg webosMatch7.3.1-43

AND

lg oled55a23laMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "webOS",
    "vendor": "LG",
    "versions": [
      {
        "status": "affected",
        "version": "5.5.0"
      },
      {
        "status": "affected",
        "version": "6.3.3-442"
      },
      {
        "status": "affected",
        "version": "7.3.1-43 "
      }
    ]
  }
]

Source	Link
lgsecurity	www.lgsecurity.lge.com/bulletins/tv
bitdefender	www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/

07 Feb 2025 18:33Current

9.4High risk

Vulners AI Score9.4

CVSS 3.17.2 - 9.1

EPSS0.00718

SSVC

CWE-78