Western Digital TV Media Player and TV Live Hub Uncertified RCE Vulnerability

Western Digital TV Media Player and TV Live Hub are both multimedia player products from Western Digital. A security vulnerability exists in Western Digital TV Media Player version 1.03.07 and TV Live Hub version 3.12.13. A remote attacker can exploit this vulnerability by sending a specially...

Code injection

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi...

CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi...

CVE-2018-1151

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi...

CVE-2018-1151: Improper Restriction of Operations within the Bounds of a Memory Buffer

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi...