PT-2018-10626
CVE-2018-1151
·
Published
2018-06-12
·
Updated
2019-05-28
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Western Digital TV Media Player version 1.03.07
Western Digital TV Live Hub version 3.12.13
Description
The issue allows unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to the "toServerValue.cgi" endpoint.
Recommendations
For Western Digital TV Media Player version 1.03.07, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available.
For Western Digital TV Live Hub version 3.12.13, consider restricting access to the "toServerValue.cgi" endpoint until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾