VulnerabilityModified
CVE-2022-23727
There is a privilege escalation vulnerability in some webOS TVs.
HIGH 7.8EPSS 0.23%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.23% probability · 13th percentile
- CISA KEV
- Not listed
- Affected
- lg/webos
- Source
- product.security@lge.com
References
- https://lgsecurity.lge.com/bulletins/tvVendor Advisory
- https://lgsecurity.lge.com/bulletins/tvVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.