CVE-2024-2862: Password reset vulnerability without authorization on LG LED Assistant
Published Mar 25, 2024
·Updated
This vulnerability allows remote attackers to reset the password of anonymous users without authorization on the affected LG LED Assistant.
Affected Software
2 affected components
LG LED Assistant
LG LG LED Assistant=2.1.65
Event History
Mar 25, 2024
CVE Published
via MITRE·06:31 AM
Data Sourced
via MITRE·06:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-2862?
CVE-2024-2862 has been classified as a high severity vulnerability, allowing unauthorized password resets for anonymous users.
2
How do I fix CVE-2024-2862?
To fix CVE-2024-2862, users should update to the latest version of the LG LED Assistant provided by LG.
3
What is the impact of CVE-2024-2862?
The impact of CVE-2024-2862 is that it enables remote attackers to reset passwords without proper authorization, compromising user accounts.
4
Who is affected by CVE-2024-2862?
CVE-2024-2862 affects users of the LG LED Assistant software.
5
When was CVE-2024-2862 discovered?
CVE-2024-2862 was officially reported in 2024, but specific dates may vary based on security advisory releases.