CVE-2018-1151

9.8 criticalEPSS 8.3%

Critical (9.8) in westerndigital. EPSS 8.3% chance of exploitation in the next 30 days.

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 8.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-11-01)
CWE: CWE-119
Published: 2018-06-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

westerndigital:tv_live_hub_firmware
westerndigital:tv_media_player_firmware

References

https://www.tenable.com/security/research/tra-2018-14
https://www.tenable.com/security/research/tra-2018-14

Check your stack JSON