Detections
Analytics
CVE-2018-16286
critical
Description
LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8137
http://mamaquieroserpentester.blogspot.com/2018/09/multiple-vulnerabilities-in-lg.html