{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: LG vulnerabilities","home_page_url":"https://patchfirst.co/vendor/lg/","feed_url":"https://patchfirst.co/feed/vendor/lg.json","description":"New and newly exploited LG CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2023-40504","url":"https://patchfirst.co/cve/CVE-2023-40504/","title":"CVE-2023-40504: LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 88.7% (higher than 99.77% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.8 of 100.","summary":"LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:48.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.8,"kev":null,"epss":{"score":0.88728,"percentile":0.99774},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-40498","url":"https://patchfirst.co/cve/CVE-2023-40498/","title":"CVE-2023-40498: LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 85.1% (higher than 99.71% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.8 of 100.","summary":"LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:44.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.8,"kev":null,"epss":{"score":0.8509,"percentile":0.99713},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-40497","url":"https://patchfirst.co/cve/CVE-2023-40497/","title":"CVE-2023-40497: LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 67.3% (higher than 99.3% of CVEs). CVSS 9.8 CRITICAL. Priority 26.7 of 100.","summary":"LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.7,"kev":null,"epss":{"score":0.6725,"percentile":0.993},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-40502","url":"https://patchfirst.co/cve/CVE-2023-40502/","title":"CVE-2023-40502: LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 83.1% (higher than 99.67% of CVEs). CVSS 8.2 HIGH. Priority 25.7 of 100.","summary":"LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:47.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.7,"kev":null,"epss":{"score":0.83142,"percentile":0.99675},"cvss":{"score":8.2,"severity":"HIGH","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-40494","url":"https://patchfirst.co/cve/CVE-2023-40494/","title":"CVE-2023-40494: LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 82.0% (higher than 99.65% of CVEs). CVSS 8.2 HIGH. Priority 25.7 of 100.","summary":"LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:41.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.7,"kev":null,"epss":{"score":0.81952,"percentile":0.99651},"cvss":{"score":8.2,"severity":"HIGH","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-40492","url":"https://patchfirst.co/cve/CVE-2023-40492/","title":"CVE-2023-40492: LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 82.0% (higher than 99.65% of CVEs). CVSS 8.2 HIGH. Priority 25.7 of 100.","summary":"LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:40.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.7,"kev":null,"epss":{"score":0.81952,"percentile":0.99651},"cvss":{"score":8.2,"severity":"HIGH","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-40495","url":"https://patchfirst.co/cve/CVE-2023-40495/","title":"CVE-2023-40495: LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 75.7% (higher than 99.52% of CVEs). CVSS 7.5 HIGH. Priority 25.2 of 100.","summary":"LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2025-02-04T17:02:56.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.2,"kev":null,"epss":{"score":0.75653,"percentile":0.9952},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-40496","url":"https://patchfirst.co/cve/CVE-2023-40496/","title":"CVE-2023-40496: LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability","content_text":"LG · Simple Editor. Not in CISA KEV. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.","summary":"LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability","date_published":"2024-05-03T00:00:00.000Z","date_modified":"2024-09-18T18:29:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.1,"kev":null,"epss":{"score":0.74024,"percentile":0.99482},"cvss":{"score":7.5,"severity":"HIGH","version":"3.0"},"vendor":"LG","product":"Simple Editor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2018-14839#kev","url":"https://patchfirst.co/cve/CVE-2018-14839/","title":"[KEV] CVE-2018-14839: LG N1A1 NAS Remote Command Execution Vulnerability","content_text":"LG · N1A1 NAS. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 89.2% (higher than 99.78% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"LG N1A1 NAS Remote Command Execution Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T01:41:44.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2022-03-25","ransomware":false},"epss":{"score":0.89246,"percentile":0.9978},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"LG","product":"N1A1 NAS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}