The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs allows a hacker to create a privileged user account.

The vulnerability of the secondscreen.gateway service on the LG WebOS operating system for LG TVs involves exploiting a authentication mechanism by modifying configuration settings. Exploiting this vulnerability allows an attacker to create a privileged user account remotely...

CVE-2023-6320

A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenticated requests to trigger this...

PT-2024-18393 · Lg · Webos

Name of the Vulnerable Software and Affected Versions: webOS of LG Signage affected versions not specified Description: This issue allows remote attackers to traverse the directory on the affected webOS of LG Signage. Recommendations: At the moment, there is no information about a newer version...