High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-21	CVE-2018-17173	Code Injection vulnerability in LG Supersign CMS 2.5 LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail. network low complexity lg CWE-94	7.5
2018-09-14	CVE-2018-16706	Forced Browsing vulnerability in LG Supersign CMS LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/device/reboot on port 9080. network low complexity lg CWE-425	7.8
2018-09-14	CVE-2018-16288	Information Exposure vulnerability in LG Supersign CMS 2.5 LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs. network low complexity lg CWE-200	7.8
2018-09-14	CVE-2018-16287	Unrestricted Upload of File with Dangerous Type vulnerability in LG Supersign CMS LG SuperSign CMS allows file upload via signEzUI/playlist/edit/upload/..%2f URIs. network low complexity lg CWE-434	7.5