lg project vulnerabilities

Products

• lg 4

Latest lg project CVEs

Newest publication first

1. CVE-2014-3930 lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credential...

   Published 2017-04-03

   High·CVSS 7.5 EPSS 1.7%

   lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials.

2. CVE-2014-3929 The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys.

   Published 2017-04-03

   High·CVSS 7.5 EPSS 2.2%

   The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys.

3. CVE-2014-3928 Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials.

   Published 2017-04-03

   Critical·CVSS 9.8 EPSS 2.3%

   Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials.

4. CVE-2014-3926 Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter.

   Published 2017-03-13

   Medium·CVSS 6.1 EPSS 1.4%

   Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.