CVE-2018-14839
LG N1A1 NAS Remote Command Execution Vulnerability
Published May 14, 2019 · updated Jun 16, 2026 · lg n1a1 firmware
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
Timeline
Detection, updates, and resolution for this record.
May 14, 2019 · Catalog
Detected
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
Mar 25, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 15, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
Required action
Apply updates per vendor instructions.
CISA due date Apr 15, 2022
Affected
- cpe lg/n1a1 firmware3718.510
- vendor LG N1A1 NASversion unspecified
Sources
- CISA KEVCVE-2018-14839
LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability.
cisa.gov - CVE.orgCVE-2018-14839
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-14839
30-day exploitation probability 89.4%
first.org - NIST NVDCVE-2018-14839
LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.
nvd.nist.gov