CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.44% chance of exploitation in the next 30 days, 95th percentile

Published

2018-06-12

Updated

2024-09-17

Proof-of-concept exploits (1)

• https://www.tenable.com/security/research/tra-2018-14

References

• CVE Record
• NVD entry

Related

• CVE-2018-11509
• CVE-2018-11510
• CVE-2018-11508
• CVE-2018-11511
• CVE-2018-11505
• CVE-2018-11512