PT-2018-10626 · Western Digital · Western Digital Tv Live Hub+1

Publicado 2018-06-12 · Atualizado 2019-05-28 · CVE-2018-1151

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Western Digital TV Media Player version 1.03.07 Western Digital TV Live Hub version 3.12.13

Description The issue allows unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to the "toServerValue.cgi" endpoint.

Recommendations For Western Digital TV Media Player version 1.03.07, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available. For Western Digital TV Live Hub version 3.12.13, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-1151

Produtos afetados

Western Digital Tv Live Hub

Western Digital Tv Media Player

Referências · 3

• 🔥 https://tenable.com/security/research/tra-2018-14 · Exploit
• https://osv.dev/vulnerability/CVE-2018-1151 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1151 · Nota de Segurança