CVE-2018-16706

CVE-2018-16706 affects LG SuperSign CMS. The issue allows remote reboot of TVs without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. Root cause details are not elaborated in the provided documents beyond the reboot mechanism. Impact is high availability loss ...

CVE-2018-16287

LG SuperSign CMS is affected by a file-upload vulnerability exploitable via signEzUI/playlist/edit/upload/..%2f URIs. The NVD entry CVE-2018-16287 documents a high-severity issue (CVSS v3.0: 9.8, Network attack, no authentication, no user interaction) leading to partial confidentiality, integrity...

CVE-2018-16288

Affected product: LG SuperSign EZ CMS 2.5. Vulnerability: Local File Inclusion (LFI) in signEzUI/playlist/edit/upload/..%2f URIs allows reading arbitrary files on the device. The Nuclei template and Open Source disclosures confirm this LFI condition, with paths such as signEzUI/playlist/edit/uplo...