VulnCheck KEV: CVE-2024-2862

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...

CVE-2024-2862

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...

CVE-2024-2862

creationtimestamp| type| source ---|---|--- 2025-12-23 21:03:00+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3maonj3t4aq2f 2026-02-03 21:02:53+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mdyb3onq4v2c...

CVE-2024-2862 Password reset vulnerability without authorization on LG LED Assistant

This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant...

CVE-2024-2862

LG LED Assistant exposes an unauthenticated password-reset vulnerability (CVE-2024-2862). The Nuclei template details an endpoint: /api/changePw that accepts requests from localhost and can be triggered by spoofing X-Forwarded-For: 127.0.0.1 to obtain a success response, enabling password resets ...