CVE-2023-40515 - CVE House
Back to Database
Status published High CVE-2023-40515

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability

Vulnerability Description

LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the joinAddUser method. The issue results from improper input validation. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. . Was ZDI-CAN-20048.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40515

Credits & Attribution

No credits recorded in the NVD database.

References

More from LG

View All →
CVE-2023-6320
Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint
Critical 9.1
CVE-2023-6319
Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service
Critical 9.1
CVE-2023-6318
Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service
Critical 9.1
CVE-2023-6317
PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction
High 7.2
CVE-2023-41181
LG SuperSign Media Editor getSubFolderList Directory Traversal Information Disclosure Vulnerability
Medium 5.3

Affected Vendor

Affected Software

Simple Editor
Vulnerable Versions:
LG Simple Editor 3.21.0

Timeline

Official Publish: May 3rd, 2024
Last Modified: September 18th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-20

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact