CVE-2023-40498 : LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerabil

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the cp command implemented in the makeDetailContent method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. . Was ZDI-CAN-19925.

Published 2024-05-03 03:15:24

Updated 2025-04-10 14:42:35

Source Zero Day Initiative

View at NVD, CVE.org

Vulnerability category: Directory traversalExecute code

Products affected by CVE-2023-40498

LG » Simple Editor » Version:
cpe:2.3:a:lg:simple_editor:0:*:*:*:*:*:*:*
Matching versions
LG » Simple Editor » Version: 3.21.0
cpe:2.3:a:lg:simple_editor:3.21.0:*:*:*:*:*:*:*
Matching versions

*Version "0" is used as a placeholder when we don't have exact version information.

Exploit prediction scoring system (EPSS) score for CVE-2023-40498

EPSS FAQ

87.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2023-40498

LG Simple Editor Remote Code Execution

Disclosure Date: 2023-08-24

First seen: 2023-09-11

exploit/windows/http/lg_simple_editor_rce

This Metasploit module exploits broken access control and directory traversal vulnerabilities in LG Simple Editor software for gaining code execution. The vulnerabilities exist in versions of LG Simple Editor prior to v3.21. By exploiting this flaw, an attack

More information

CVSS scores for CVE-2023-40498

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Zero Day Initiative	2024-05-03
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST	2025-04-10
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-40498

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Assigned by: zdi-disclosures@trendmicro.com (Secondary)

References for CVE-2023-40498

https://www.zerodayinitiative.com/advisories/ZDI-23-1204/

ZDI-23-1204 | Zero Day Initiative
Third Party Advisory

Jump to