Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-9759

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.

Published

2020-03-23T16:15:17.860

Last Modified

2024-11-21T05:41:13.870

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.6 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-494

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	lg	webos	-	Yes

References

https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html Exploit, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html Mailing List, Not Applicable, Third Party Advisory ([email protected])
https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html Mailing List, Not Applicable, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)