A vulnerability was found in LG SuperSign CMS (Content Management System) (unknown version). It has been rated as critical. This issue affects an unknown code block of the component Captcha. The manipulation as part of a Cookie leads to a improper authentication vulnerability. Using CWE to declare the problem leads to CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

LG SuperSign CMS allows authentication bypass because the CAPTCHA requirement is skipped if a captcha:pass cookie is sent, and because the PIN is limited to four digits.

The bug was discovered 09/07/2018. The weakness was presented 09/14/2018 (Website). The advisory is shared at mamaquieroserpentester.blogspot.com. The identification of this vulnerability is CVE-2018-16286 since 08/31/2018. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 03/24/2020).

The vulnerability was handled as a non-public zero-day exploit for at least 7 days. During that time the estimated underground price was around $5k-$25k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See 124074, 124075 and 124077 for similar entries.

Productinfo

Type

• Content Management System

Vendor

• LG

Name

• SuperSign CMS

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion