Vulnerability · Published Feb 26, 2024 · Assigned by LGE
CVE-2024-1885Remote Code Execution attack on LG Signage
Medium 6.3
In plain English
A medium-severity code injection in LG Signage from LG Electronics. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.9%top 39.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| LG Electronics | LG Signage | 6.0.0-56 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- https://lgsecurity.lge.com/bulletins/idproducts#updateDetails vendor-advisory