← All advisories

Critical severity9.8NVD Advisory· Published Sep 21, 2018· Updated Jun 17, 2026

CVE-2018-17173

CVE-2018-17173

Description

LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

LG/Supersign CMS2 versions
cpe:2.3:a:lg:supersign_cms:2.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lg:supersign_cms:2.5:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

4

mamaquieroserpentester.blogspot.com/2018/09/lg-supersign-rce-to-luna-and-back-to.htmlnvdExploitTechnical DescriptionThird Party Advisory
www.exploit-db.com/exploits/45448/nvdThird Party AdvisoryVDB Entry
packetstormsecurity.com/files/152733/LG-Supersign-EZ-CMS-Remote-Code-Execution.htmlnvd
www.exploit-db.com/exploits/46795/nvd

News mentions

0

No linked articles in our index yet.