Findings

CVE-2018-14839

LG N1A1 NAS Remote Command Execution Vulnerability

Published May 14, 2019 · updated Jun 16, 2026 · lg n1a1 firmware

LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

Timeline

Detection, updates, and resolution for this record.

  1. May 14, 2019 · Catalog

    Detected

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

  2. Mar 25, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Apr 15, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

Required action

Apply updates per vendor instructions.

CISA due date Apr 15, 2022

Affected

  • cpe lg/n1a1 firmware3718.510
  • vendor LG N1A1 NASversion unspecified

Sources

  • CISA KEVCVE-2018-14839

    LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability.

    cisa.gov
  • CVE.orgCVE-2018-14839

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-14839

    30-day exploitation probability 89.4%

    first.org
  • NIST NVDCVE-2018-14839

    LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

    nvd.nist.gov

References

CVE-2018-14839 · ZeroDay Findings