webOS vulnerabilities

4 known vulnerabilities in webOS from LG. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  webOS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-6320Apr 9, 2024LGEPSS 3.95%

  A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6. A series of specially crafted requests can lead to command execution as the dbus user. An attacker can make authenti

• 7.2 High severity

  webOS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-6319Apr 9, 2024LGEPSS 6.44%

  A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker c

• 7.2 High severity

  webOS: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-6318Apr 9, 2024LGEPSS 4.67%

  A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can ma

• 9.8 Critical severity

  WebOS: Authorization Bypass Through User-Controlled Key

  CVE-2023-6317Apr 9, 2024LGEPSS 1.09%

  A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create a privileged account without asking the user for the security PIN. Full versions and TV models affected: webOS 4.9.7 - 5.30.40 running on LG