CVE-2018-1151: Westerndigital Tv Live Hub Firmware

Critical severity, CVSS 9.8. EPSS: 8.4% chance of exploitation in the next 30 days.

The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or cause denial of service via crafted HTTP requests to toServerValue.cgi.

Affected products

• Westerndigital Tv Live Hub Firmware: version 3.12.13 only
• Westerndigital Tv Media Player Firmware: version 1.03.07 only

Published 2018-06-12. Last modified 2026-06-17.