CVEvulnerability
CVE-2020-9759
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-494
Description
A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.
Affected configurations
• lg webos
Related
Weakness · CWE (1)
- CWE-494 Download of Code Without Integrity Check weakness
References
- https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html Mailing List, Not Applicable, Third Party Advisory
- https://blog.recurity-labs.com/2021-02-03/webOS_Pt1.html Exploit, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/09/msg00018.html Mailing List, Not Applicable, Third Party Advisory