CVE-2024-2862: LG LED Assistant improper authentication allows anonymous password reset

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: medium.

critical priorityCVSS 9.8 with network reachability, no authentication and no user interaction, plus a high EPSS score, make this a top remediation priority despite no KEV listing.

What it is

LG LED Assistant contains an improper authentication flaw (CWE-287) tied to weak password recovery (CWE-640). A remote, unauthenticated attacker can reset the password of anonymous users without authorization. The flaw is rated critical (CVSS 9.8) and affects confidentiality, integrity and availability equally.

Impact

An attacker can take over anonymous user accounts by resetting their passwords, gaining the access and control those accounts hold. Because the vector scores high on all three impact metrics, full compromise of the affected account context is possible.

Attack surface

Reachable over the network with no authentication and no user interaction required, per the CVSS vector AV:N/AC:L/PR:N/UI:N. The description confirms remote attackers can trigger the reset without authorization.

Exploitation

Not listed in CISA KEV and no ransomware use documented. EPSS is high at roughly 0.51 probability over 30 days (98.9th percentile), and the only references are vendor advisories, so no public exploit code is confirmed in this record.

What to do

• Apply the vendor update from the LG security bulletin for LG LED Assistant.
• Restrict network exposure of LG LED Assistant to trusted management networks or VPN.
• Disable or harden anonymous user accounts and password recovery where the product allows it.
• Monitor and alert on unexpected password reset events for anonymous accounts.
• Review access logs for unauthenticated reset requests and rotate credentials of affected accounts.

Detection

• Alert on password reset events for anonymous accounts in LG LED Assistant logs.
• Hunt for unauthenticated requests to password recovery endpoints from unexpected source IPs.
• Correlate reset activity with subsequent logins from new or unusual locations.
• Monitor network traffic to LG LED Assistant management interfaces for anomalous reset calls.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.