PT-2024-18392 · Lg · Webos

Name of the Vulnerable Software and Affected Versions: LG Signage webOS affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on the affected webOS of LG Signage. Recommendations: At the moment, there is no information about a newer version that...

CVE-2024-1885: Improper Control of Generation of Code

This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage...

LG webOS Security Vulnerability

LG webOS is a Linux kernel-based operating system for Smart TVs from the South Korean company LG. A security vulnerability exists in LG webOS. An attacker could exploit this vulnerability to execute arbitrary code...

CVE-2024-1886: Path Traversal: '.../...//'

This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage...

PT-2023-9036

Name of the Vulnerable Software and Affected Versions webOS versions 4 through 7 Description A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service. This vulnerability can be triggered by a series of specially crafted...

PT-2023-9038

Name of the Vulnerable Software and Affected Versions webOS versions 4 through 7 Description A prompt bypass exists in the secondscreen.gateway service running on webOS, allowing an attacker to create a privileged account without asking the user for the security PIN. This issue is related to the...

PT-2023-9035

Name of the Vulnerable Software and Affected Versions webOS versions 5 through 7 webOS version 5.5.0 - 04.50.51 webOS version 6.3.3-442 webOS version 7.3.1-43 Description A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service...

PT-2023-9037

Name of the Vulnerable Software and Affected Versions webOS versions 5 and 6 webOS versions 5.5.0 - 04.50.51 webOS version 6.3.3-442 Description A command injection vulnerability exists in the "com.webos.service.connectionmanager/tv/setVlanStaticAddress" endpoint. This vulnerability can be...

SUSE CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

Heap overflow

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

CVE-2022-23731 involves a heap vulnerability in the V8 JavaScript engine used by some webOS TV models. The Red Hat/NVD/CVE records describe a local privilege-escalation flaw originating from the V8 heap, enabling an attacker with local access to gain higher privileges on affected TVs. Public mate...

Lg Electronics Lg WebOs 安全漏洞

Lg Electronics Lg WebOs is a Linux kernel-based smart TV operating system from Lg Electronics, a South Korean company. A security vulnerability exists in Lg Electronics Lg WebOs that originates from a local elevation of privilege via a V8 engine vulnerability heap vulnerability...

CVE-2022-23731: Undefined Security Weakness

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23727

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...

CVE-2022-23727

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...

CVE-2022-23727

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...