CVE-2018-14839: LG N1A1 NAS Remote Command Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 89.4% chance of exploitation in the next 30 days.

LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code (remote). The attack vector is: HTTP POST with parameters.

Affected products

• LG N1A1 Firmware: version 3718.510 only

Published 2019-05-14. Last modified 2026-06-17.