CVE-2018-14839

LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2019-05-14

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2022-03-25, action due 2022-04-15: Apply updates per vendor instructions.

Weaknesses

CWE-78

Affected products

• N1a1 Firmware (Lg)

References

• https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14839