LG NAS Devices - Remote Code Execution

LG NAS devices contain a pre-auth remote command injection via the "password" parameter. id: CVE-2018-10818 info: name: LG NAS Devices - Remote Code Execution author: gy741 severity: critical description: LG NAS devices contain a pre-auth remote command injection via the "password" parameter...

CVE-2018-14839

LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code remote. The attack vector is: HTTP POST with parameters...

LG NAS 3718.510.a0 - Remote Command Execution

LG NAS 3718.510.a0 - Remote Command Execution LG NAS 3718.510.a0 - Remote Command Execution Author: @0x616163 Date: 2018-07-29 Credits: https://www.vpnmentor.com/blog/critical-vulnerability-found-majority-lg-nas-devices/ CVE: N/A Firmware Version: 3718.510.a0 !/usr/bin/env python import sys impor...

LG NAS 3718.510.a0 - Remote Command Execution

LG NAS 3718.510.a0 - Remote Command Execution Author: @0x616163 Date: 2018-07-29 Credits: https://www.vpnmentor.com/blog/critical-vulnerability-found-majority-lg-nas-devices/ CVE: N/A Firmware Version: 3718.510.a0 !/usr/bin/env python import sys import argparse import requests from collections...

Critical Unpatched RCE Flaw Disclosed in LG Network Storage Devices

If you have installed a network-attached storage device manufactured by LG Electronics, you should take it down immediately, read this article carefully and then take appropriate action to protect your sensitive data. A security researcher has revealed complete technical details of an unpatched...

LG NAS Used / Password Hash Disclosure

Exploit Title: LG NAS Users and password hash disclosure Date: 2012-09-29 Vendor Homepage: http://www.lg.com/ Version: HTTP/1.1 Host: 192.168.0.1:8000 User-Agent: Mozilla/5.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzi...