LG SuperSign CMS Arbitrary File Read Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. An arbitrary file read vulnerability exists in LG SuperSign CMS, which can be exploited by an...

CVE-2018-16288

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16287

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16706

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...

CVE-2018-16286

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

Authentication flaw

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

Authentication flaw

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...

Unrestricted file upload

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

Code injection

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16287

LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16286

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits...

CVE-2018-16286

LG SuperSign CMS suffers an authentication bypass: if a captcha:pass cookie is present and the PIN is limited to four digits, CAPTCHA is skipped and access can be gained without proper authentication. Multiple sources (NVD/NVD-derived records and CNVD) describe this flaw and its impact; CVSS metr...

CVE-2018-16288

LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs...

CVE-2018-16287

LG SuperSign CMS is affected by a file-upload vulnerability exploitable via signEzUI/playlist/edit/upload/..%2f URIs. The NVD entry CVE-2018-16287 documents a high-severity issue (CVSS v3.0: 9.8, Network attack, no authentication, no user interaction) leading to partial confidentiality, integrity...

CVE-2018-16706

CVE-2018-16706 affects LG SuperSign CMS. The issue allows remote reboot of TVs without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. Root cause details are not elaborated in the provided documents beyond the reboot mechanism. Impact is high availability loss ...

CVE-2018-16706

LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsrserver/device/reboot on port 9080...

PT-2018-13464

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows authentication bypass. This is possible because the CAPTCHA requirement can be skipped by sending a captcha:pass cookie. Additionally, the PIN is limited to four...

PT-2018-13465

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue concerns a file upload vulnerability. It allows file upload via /signEzUI/playlist/edit/upload/..%2f URIs. Recommendations At the moment, there is no information about a...

PT-2018-13695

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows LG TVs to be rebooted remotely without authentication. This can be achieved by sending a direct HTTP request to the /qsr server/device/reboot API endpoint on port...

PT-2018-13466

Name of the Vulnerable Software and Affected Versions LG SuperSign CMS affected versions not specified Description The issue allows for the reading of arbitrary files through specific URIs, such as signEzUI/playlist/edit/upload/..%2f. Recommendations At the moment, there is no information about a...