NO PATCH FOR FLAW EXPOSING HUNDREDS OF LG CAMERAS TO REMOTE HACKING

Summary from the TLDR InfoSec newsletter

The CISA has released an alert regarding a new authentication bypass vulnerability in LG Innotek LNV5110R cameras that could allow remote attackers to gain administrative privileges. The vulnerability allows attackers to upload an HTTP POST request to the device's non-volatile storage, potentially resulting in remote code execution. LG has stated that it will not release a patch for the vulnerability because the device has reached its end of life.