LG SuperSign CMS Remote Code Execution Vulnerability

LG SuperSign CMS is a content management system for LG webOS from the Luckin LG Group in Korea. The system supports connection to external databases and allows access to the server from mobile devices. A remote code execution vulnerability exists in LG SuperSign CMS, which can be exploited by...

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

CVE-2018-17173

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsrserver/device/getThumbnail...

CVE-2018-17173

CVE-2018-17173 affects LG SuperSign EZ CMS (2.5 era) and allows unauthenticated remote code execution via the sourceUri parameter to qsr_server/device/getThumbnail. Exploitation can lead to arbitrary command execution and complete server compromise. Remediation: upgrade to a patched LG SuperSign ...