LG webOS Security Vulnerability

LG webOS is a Linux kernel-based smart TV operating system from South Korea's LG. A security vulnerability exists in LG webOS. An attacker could exploit the vulnerability to read arbitrary files on the server running the application...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based operating system for Smart TVs from the South Korean company LG. A security vulnerability exists in LG webOS. An attacker could exploit this vulnerability to execute arbitrary code...

CVE-2024-1886: Path Traversal: '.../...//'

This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage...

CVE-2024-1885: Improper Control of Generation of Code

This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage...

PT-2024-18392 · Lg · Webos

Name of the Vulnerable Software and Affected Versions: LG Signage webOS affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on the affected webOS of LG Signage. Recommendations: At the moment, there is no information about a newer version that...

PT-2023-9036

Name of the Vulnerable Software and Affected Versions LG WebOS versions 4 through 7 Description A command injection issue exists in the getAudioMetadata method of the com.webos.service.attachedstoragemanager service. Exploitation involves sending specially crafted requests, potentially allowing a...

PT-2023-9035

Name of the Vulnerable Software and Affected Versions LG WebOS versions 5 through 7 LG WebOS versions 5.5.0 through 6.3.3-442 LG WebOS version 7.3.1-43 Description A command injection issue exists in the processAnalyticsReport method of the com.webos.service.cloudupload service. This allows a...

PT-2023-9038

Name of the Vulnerable Software and Affected Versions webOS versions 4 through 7 Description A prompt bypass exists in the secondscreen.gateway service running on webOS, allowing an attacker to create a privileged account without asking the user for the security PIN. This issue is related to the...

PT-2023-9037

Name of the Vulnerable Software and Affected Versions webOS versions 5 and 6 webOS versions 5.5.0 - 04.50.51 webOS version 6.3.3-442 Description A command injection vulnerability exists in the "com.webos.service.connectionmanager/tv/setVlanStaticAddress" endpoint. This vulnerability can be...

SUSE CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

Heap overflow

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

CVE-2022-23731 involves a heap vulnerability in the V8 JavaScript engine used by some webOS TV models. The Red Hat/NVD/CVE records describe a local privilege-escalation flaw originating from the V8 heap, enabling an attacker with local access to gain higher privileges on affected TVs. Public mate...

CVE-2022-23731: Undefined Security Weakness

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

Lg Electronics Lg WebOs security vulnerabilities

Lg Electronics Lg WebOs is a Linux kernel-based smart TV operating system from Lg Electronics, a South Korean company. A security vulnerability exists in Lg Electronics Lg WebOs that originates from a local elevation of privilege via a V8 engine vulnerability heap vulnerability...

PT-2022-16236

Name of the Vulnerable Software and Affected Versions webOS TV affected versions not specified Description The V8 javascript engine contains a heap vulnerability that can cause privilege escalation, potentially impacting some webOS TV models. Recommendations At the moment, there is no information...

CVE-2022-23727

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...