CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi.

Affected

Western Digital · TV Media Player · TV Live Hub

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

8.31% chance of exploitation in the next 30 days, 95th percentile

Published

2018-06-12

Updated

2024-09-17

Proof-of-concept exploits (1)

• https://www.tenable.com/security/research/tra-2018-14

References

• CVE Record
• NVD entry