Feb 26, 2024 Global

LG webOS Signage code injection and path traversal flaws (CVE-2024-1885, CVE-2024-1886)

LG published two CVEs for webOS Signage 6.0.0-56 on February 26, 2024: CVE-2024-1885, a code injection flaw that can let a remote attacker run code on the device, and CVE-2024-1886, a path traversal flaw rated 8.8 by NVD. Scores vary across databases for the first one. Databases I checked report no public exploit code for either.

Type: Vulnerability
Sector: Other
Country: Global
CVE: CVE-2024-1885 CVE-2024-1886

Products in the directory

LG SuperSign

Sources

CVE-2024-1885 · NIST NVD
CVE-2024-1886 · NIST NVD
LG product security bulletins · LG Electronics
https://lgsecurity.lge.com/bulletins/idproducts#updateDetails