CVE-2018-16946

mediumPriorität · verfolgen · 43EPSS 0.093 · 95. PerzentilExploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

9.35% (95th) EPSS

CVSS 5 · medium

Is it mine?

19 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · bewertet 2026-10-26

LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) files and download backup files (via download.php) without authenticating. These backup files contain user credentials and configuration information for the camera device. An attacker is able to discover the backup filename via reading the system logs or report data, or just by brute-forcing the backup filename pattern. It may be possible to authenticate to the admin account with the admin password.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.07.1highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-552USprimär

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

EDB-45394LG Smart IP Camera 1508190 - Backup File DownloadPoC · exploit_db

betroffene Produkte (19)

Betroffene Produkte und Versionsbereiche.

n/a n/a≤ n/aenisa_euvdEU
lg lnb5110 firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnb5110_firmware:*:*:*:*:*:*:*:*
lg lnb5320 firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnb5320_firmware:*:*:*:*:*:*:*:*
lg lnb5320r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnb5320r_firmware:*:*:*:*:*:*:*:*
lg lnb7210 firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnb7210_firmware:*:*:*:*:*:*:*:*
lg lnd3230r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnd3230r_firmware:*:*:*:*:*:*:*:*
lg lnd5110 firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnd5110_firmware:*:*:*:*:*:*:*:*
lg lnd5110r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnd5110r_firmware:*:*:*:*:*:*:*:*
lg lnd5220r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnd5220r_firmware:*:*:*:*:*:*:*:*
lg lnd7210 firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnd7210_firmware:*:*:*:*:*:*:*:*
lg lnd7210r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnd7210r_firmware:*:*:*:*:*:*:*:*
lg lnu3230r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnu3230r_firmware:*:*:*:*:*:*:*:*
lg lnu5110r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnu5110r_firmware:*:*:*:*:*:*:*:*
lg lnu5320r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnu5320r_firmware:*:*:*:*:*:*:*:*
lg lnu7210r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnu7210r_firmware:*:*:*:*:*:*:*:*
lg lnv5110r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnv5110r_firmware:*:*:*:*:*:*:*:*
lg lnv5320r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnv5320r_firmware:*:*:*:*:*:*:*:*
lg lnv7210 firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnv7210_firmware:*:*:*:*:*:*:*:*
lg lnv7210r firmware1310250 → 1508190nvdUScpe:2.3:o:lg:lnv7210r_firmware:*:*:*:*:*:*:*:*

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

veröffentlicht 2018-09-12geändert 2026-06-17

verwandt (569)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-21589US	high7.5OT kritisch	99.5% (100th)	KEV	2026-10-05
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Cru…
CVE-2025-11371US	—OT kritisch	92.1% (100th)	KEV	2025-10-09
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system…
CVE-2025-48928US	—OT kritisch	0.58% (47th)	KEV	2025-05-28
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over H…
CVE-2020-17519US	high7.5OT kritisch	97.8% (100th)	KEV	2021-01-05
A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST…
CVE-2017-16651US	high7.8OT kritisch	45.7% (99th)	KEV	2017-11-09
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, a…

+564 weitere

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/EgeBalci/LG-Smart-IP-Device-Backup-Download cnnvd
https://www.exploit-db.com/exploits/45394/cnnvd
https://github.com/EgeBalci/LG-Smart-IP-Device-Backup-Download enisa_euvd
https://www.exploit-db.com/exploits/45394/enisa_euvd
https://github.com/EgeBalci/LG-Smart-IP-Device-Backup-DownloadExploitThird Party Advisorynvd
https://www.exploit-db.com/exploits/45394/ExploitThird Party AdvisoryVDB Entrynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan