critical9.8Known exploited
CVE-2018-14839
LG N1A1 NAS Remote Command Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
Apply updates per vendor instructions.
Impact
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lg | N1a1 Firmware | Version 3718.510 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247
- https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14839