How severe is CVE-2020-9759?

CVE-2020-9759 has a CVSS 3.x base score of 4.6, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-2020-9759 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-9759?

CVE-2020-9759 affects Lg Webos. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2020-9759?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2020-9759 published?

CVE-2020-9759 was published on 2020-03-23 and last updated on 2026-06-17.

CVE-2020-9759

CVE-2020-9759 is a medium-severity vulnerability in Lg Webos with a CVSS 3.x base score of 4.6. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-494.

Key facts

Severity: Medium (CVSS 3.x base score 4.6)
CVSS v2: 9.3
EPSS exploit prediction: 0% (38th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-494
Affected product: Lg Webos
Published: 2020-03-23
Last modified: 2026-06-17

Description

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.

Frequently asked questions

What is CVE-2020-9759?: A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker could exploit this vulnerability through crafted configuration files and executable files.
How severe is CVE-2020-9759?: CVE-2020-9759 has a CVSS 3.x base score of 4.6, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-2020-9759 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-9759?: CVE-2020-9759 affects Lg Webos. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2020-9759?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2020-9759 published?: CVE-2020-9759 was published on 2020-03-23 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:o:lg:webos:-:*:*:*:*:*:*:*

More vulnerabilities in Lg Webos

CVE-2022-23730 — Critical (CVSS 9.8): The public API error causes for the attacker to be able to bypass API access control.
CVE-2023-6320 — Critical (CVSS 9.1): A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on…
CVE-2023-6319 — Critical (CVSS 9.1): A command injection vulnerability exists in the getAudioMetadata method from the…
CVE-2023-6318 — Critical (CVSS 9.1): A command injection vulnerability exists in the processAnalyticsReport method from the…
CVE-2022-23731 — High (CVSS 7.8): V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models.
CVE-2022-23727 — High (CVSS 7.8): There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is…

All CVEs affecting Lg Webos →

Other CWE-494 vulnerabilities

CVE-2020-1595 — Critical (CVSS 9.9): <p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from…
CVE-2020-1210 — Critical (CVSS 9.9): <p>A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source…
CVE-2026-42248 — Critical (CVSS 9.8): Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike…
CVE-2026-34841 — Critical (CVSS 9.8): Bruno is an open source IDE for exploring and testing APIs. Prior to 3.2.1, Bruno was affected by a supply chain attack…
CVE-2026-3000 — Critical (CVSS 9.8): IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated…
CVE-2026-2999 — Critical (CVSS 9.8): IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated…

Browse all CWE-494 vulnerabilities →