LG.LED.Assistant.remove3DLUT.Directory.Traversal

description-logoDescription

This indicates an attack attempt to exploit a Directory Traversal Vulnerability in LG LED Assistant.
This vulnerability is due to improper input validation in the remove3DLUT function. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in arbitrary deletion of file or, in the worst case, denial of service.

affected-products-logoAffected Products

LG LED Assistant v2.1.61 and prior

Impact logoImpact

Denial of Service: Remote attackers can crash vulnerable systems.

recomended-action-logoRecommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.lg.com/us/business/display-solutions/supersign

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2024-03-20 27.752 Default_action:pass:drop
2024-03-12 27.747