CVE-2024-2862

Summary

CVE-2024-2862 is a vulnerability affecting LG LED Assistant, allowing remote attackers to reset the password of anonymous users without authorization. The base severity of this vulnerability is classified as CRITICAL, with a base score of 9.1. The confidentiality impact is rated as HIGH, posing a potential danger to organizations using the affected product. The vulnerability has an exploitability score of 3.9 and requires no privileges or user interaction to exploit. It has a low attack complexity and can be exploited over a network. Remediation steps or mitigation measures are not provided in the available information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.