Approved changes feed: RSS · Atom

cpe:2.3:o:lg:webos:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorLg (c960daae-021c-5387-9726-035a5d87d3ac)
ProductWebos (e1536560-970c-5d9f-a590-01478e755010)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6319 vulnerable 2026-06-08 06:19:46.929009 Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service
CRITICAL (9.1)
A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability. * webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA  * webOS 5.5.0 - 04.50.51 running on OLED55CXPUA  * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB  * webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA
Published: 2024-04-09T13:42:06.203Z
Updated: 2024-08-02T08:28:21.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-9759 vulnerable 2026-06-08 05:28:02.761581 webOS TV Emulator privilege escalation vulnerability
MEDIUM (4.6)
A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.
Published: 2020-03-23T15:36:51.058Z
Updated: 2024-09-17T03:39:08.185Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.