CVE-2018-14839 is a critical remote command execution vulnerability affecting LG N1A1 NAS devices (firmware version 3718.510). This flaw allows an unauthenticated attacker to execute arbitrary code remotely via specially crafted HTTP POST requests, leading to complete compromise of the device. With a CVSS score of 9.8 (Critical) and an EPSS score indicating high exploitability, this vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog. While no public exploit modules like Metasploit or Nuclei are listed, significant community discussion suggests awareness and potential for custom exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3718.510CPE matchmatch criteria | cpe:2.3:o:lg:n1a1_firmware:3718.510:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.