CVE-2024-1886CWE-35

Absolute path traversal attack on LG Signage

Low · published February 26, 2024

CVSS v3.1
3.0
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00797 · 56.0th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2024-02-26T07:53Z
EPSS history
Timeline
  • 26 FEB 07:53Z
    Absolute path traversal attack on LG Signage
    cvelistv5