by Kastro
Paper/Archive/CVE-2022-23730

CVE-2022-23730

LGE — The public API error causes for the attacker to be able to bypass API access control.

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.5.635 × 2012.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The public API error causes for the attacker to be able to bypass API access control.

Affected

ProductAffectedFixed inSource
LG webOS TVwebOS 4.0 or higher–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reflgsecurity.lge.com/bulletins/tv