CVE-2018-1151: Buffer Overflow
Published Jun 12, 2018
·Updated
The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi.
Affected Software
4 affected components
WesternDigital Tv Live Hub Firmware=3.12.13
WesternDigital Tv Live Hub
WesternDigital Tv Media Player Firmware=1.03.07
WesternDigital Tv Media Player
Event History
Jun 12, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-1151?
CVE-2018-1151 is classified as a critical vulnerability that allows remote code execution.
2
How do I fix CVE-2018-1151?
To mitigate CVE-2018-1151, apply the latest firmware updates provided by Western Digital for the affected devices.
3
What are the affected software versions for CVE-2018-1151?
CVE-2018-1151 affects Western Digital TV Media Player firmware version 1.03.07 and TV Live Hub firmware version 3.12.13.
4
Can CVE-2018-1151 be exploited remotely?
Yes, CVE-2018-1151 can be exploited by unauthenticated remote attackers through crafted HTTP requests.
5
What impact does CVE-2018-1151 have on affected devices?
CVE-2018-1151 can lead to arbitrary code execution or denial of service on the vulnerable devices.