// For flags

CVE-2023-6319

Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service

Severity Score

9.1
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track*
*SSVC
Descriptions

A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7. A series of specially crafted requests can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.

* webOS 4.9.7 - 5.30.40 running on LG43UM7000PLA 

* webOS 5.5.0 - 04.50.51 running on OLED55CXPUA 

* webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 running on OLED48C1PUB 

* webOS 7.3.1-43 (mullet-mebin) - 03.33.85 running on OLED55A23LA

Existe una vulnerabilidad de inyección de comandos en el método getAudioMetadata del servicio com.webos.service.attachedstoragemanager en webOS versión 4 a 7. Una serie de solicitudes especialmente manipuladas pueden llevar a la ejecución de comandos como usuario root. Un atacante puede realizar solicitudes autenticadas para desencadenar esta vulnerabilidad. * webOS 4.9.7 - 5.30.40 ejecutándose en LG43UM7000PLA * webOS 5.5.0 - 04.50.51 ejecutándose en OLED55CXPUA * webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50 ejecutándose en OLED48C1PUB * webOS 7.3.1-43 (mullet-mebin) - 33.03.85 ejecutándose en OLED55A23LA

*Credits: Alexandru Lazăr of Bitdefender Labs
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Track*
Exploitation
None
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2023-11-27 CVE Reserved
  • 2024-04-09 CVE Published
  • 2024-04-10 EPSS Updated
  • 2024-08-02 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
  • CAPEC-88: OS Command Injection
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
LG
Search vendor "LG"
 WebOS
Search vendor "LG" for product "WebOS"
 4.9.7
Search vendor "LG" for product "WebOS" and version "4.9.7"
en
Affected
LG
Search vendor "LG"
 WebOS
Search vendor "LG" for product "WebOS"
 5.5.0
Search vendor "LG" for product "WebOS" and version "5.5.0"
en
Affected
LG
Search vendor "LG"
 WebOS
Search vendor "LG" for product "WebOS"
 6.3.3
Search vendor "LG" for product "WebOS" and version "6.3.3"
en
Affected
LG
Search vendor "LG"
 WebOS
Search vendor "LG" for product "WebOS"
 7.3.1
Search vendor "LG" for product "WebOS" and version "7.3.1"
en
Affected