LG-LED Assistant vulnerabilities

4 known vulnerabilities in LG-LED Assistant from LG Electronics. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-4616Sep 4, 2023LG ElectronicsEPSS 1.61%

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue res

• 7.5 High severity

  LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-4615Sep 4, 2023LG ElectronicsEPSS 1.61%

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/download/updateFile endpoint. The

• 9.8 Critical severity

  LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-4614Sep 4, 2023LG ElectronicsEPSS 2.5%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/installation/setThumbnailRc endpoint. The

• 9.8 Critical severity

  LG-LED Assistant: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-4613Sep 4, 2023LG ElectronicsEPSS 2.55%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/settings/upload endpoint. The issue resul