What’s Vulnerable › Vulnerabilities

CVE-2018-14839: LG N1A1 NAS Remote Command Execution Vulnerability

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: yes — in CISA KEV since 2022-03-25
• EPSS: 89.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-05-14 · updated 2026-06-17
• Weakness: CWE-78

Description

LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

Affected products

• LG N1A1 Firmware: 3718.510

References

• https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247
• https://medium.com/%400x616163/lg-n1a1-unauthenticated-remote-command-injection-cve-2018-14839-9d2cf760e247
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14839

Get alerted when CVE-2018-14839 or the next vulnerability affects your stack