product.security@lge.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS product.security@lge.com
03
assessed vulnerabilities (25)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-15929US | — | — | ||
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in LG Electronics SmartShare allows SQL Injection.
This issue affects SmartShare… | ||||
| CVE-2025-10538US | —OT elevated | — | ||
An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows a malicious actor to gain access to camera information incl… | ||||
| CVE-2025-10204US | —OT elevated | — | ||
A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization. This page contains a hidden form for resetting the administrator password.… | ||||
| CVE-2025-7742US | —OT elevated | — | ||
An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the devices non-volatile sto… | ||||
| CVE-2024-6179US | medium6.1 | — | ||
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSig… | ||||
| CVE-2024-6178US | medium6.1 | — | ||
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects SuperSig… | ||||
| CVE-2024-6177US | medium6.1 | — | ||
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LG Electronics SuperSign CMS allows Reflected XSS. This issue affects S… | ||||
| CVE-2024-6176US | — | — | ||
Allocation of Resources Without Limits or Throttling vulnerability in LG Electronics LG SuperSign CMS allows Port Scanning.This issue affects LG SuperSign CMS: from 4.1.3 before <… | ||||
| CVE-2024-2863US | critical9.8 | — | ||
This vulnerability allows remote attackers to traverse paths via file upload on the affected LG LED Assistant. | ||||
| CVE-2024-2862US | critical9.8 | — | ||
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.
| ||||
| CVE-2024-1886US | high8.8 | — | ||
This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage.
| ||||
| CVE-2024-1885US | critical9.8 | — | ||
This vulnerability allows remote attackers to execute arbitrary code on the affected webOS of LG Signage.
| ||||
| CVE-2023-44129US | low3.3 | — | ||
The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipInt… | ||||
| CVE-2023-44128US | low3.6 | — | ||
he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.InstallService" service… | ||||
| CVE-2023-44127US | medium5.5 | — | ||
he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps install… | ||||
| CVE-2023-44126US | medium5.5 | — | ||
The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third… | ||||
| CVE-2023-44125US | high7.8 | — | ||
The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privileg… | ||||
| CVE-2023-44124US | low3.3 | — | ||
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/setting… | ||||
| CVE-2023-44123US | high7.8 | — | ||
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in… | ||||
| CVE-2023-44122US | high7.8 | — | ||
The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpa… | ||||