CVE-2018-16946

CVE-2018-16946 affects LG LNB*, LND*, LNU*, LNV* smart IP cameras. The issue is broken access control that allows unauthenticated users to download /updownload/t.report and backup files (download.php), exposing credentials and configuration. Backup filenames can be discovered via logs/report data...

CVE-2018-16946: Files or Directories Accessible to External Parties

LG LNB, LND, LNU, and LNV smart network camera devices have broken access control. Attackers are able to download /updownload/t.report aka Log & Report files and download backup files via download.php without authenticating. These backup files contain user credentials and configuration informatio...