CVE-2024-1885CWE-94

Remote Code Execution attack on LG Signage

Medium · published February 26, 2024

CVSS v3.1
6.3
EPSS
1%
Percentile
60.0
In the wild
Unconfirmed
What it is

This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00924 · 60.0th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2024-02-26T07:39Z
EPSS history
Timeline
  • 26 FEB 07:39Z
    Remote Code Execution attack on LG Signage
    cvelistv5