CVE-2018-14839VulnerabilityPublished 03/25/2022Updated 10/24/2026

CVE-2018-14839: LG N1A1 NAS Remote Command Execution Vulnerability

Affects LG N1A1 NASSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/25/2022
KEV deadline: 04/15/2022
EPSS: 89.4% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-14839 (opens in a new tab)

Description

The LG N1A1 NAS device running version 3718.510 is affected by a remote code execution vulnerability identified as CVE-2018-14839. This vulnerability allows an attacker to execute arbitrary commands remotely on the affected device. It has been confirmed to be exploited in the wild. No specific patch or remediation information is provided in the available data.

Summary

CVE-2018-14839 is a remote command execution vulnerability affecting LG N1A1 NAS version 3718.510. The flaw allows attackers to execute arbitrary commands remotely, potentially compromising the device. This vulnerability is categorized under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). Exploitation has been observed in the wild, indicating active threat usage. No vendor advisory or patch information is provided in the current data.

Impact

Successful exploitation of this vulnerability could allow remote attackers to execute arbitrary commands on the LG N1A1 NAS device, potentially leading to full system compromise. This could result in unauthorized access, data theft, or disruption of NAS services. The presence of known exploitation in the wild elevates the risk to affected users.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected device and monitor for suspicious activity related to remote command execution attempts.

Weaknesses

CWE-78OS Command Injection (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:57:14 UTC

Weaknesses

References

Related threats