CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vulnreport@tenable.com

Published

2018-06-12

Last modified

2024-09-17

Weaknesses

CWE-119

Affected products

• Tv Live Hub (Western Digital)
• Tv Media Player (Western Digital)
• Tv Live Hub Firmware (Westerndigital)
• Tv Media Player Firmware (Westerndigital)

References

• https://www.tenable.com/security/research/tra-2018-14