.. / CVE-2018-10818

• RCE
• Nuclei
• Web

Exploit for LG NAS Devices - Remote Code Execution (CVE-2018-10818)

Description:

LG NAS devices contain a pre-auth remote command injection via the “password” parameter.

Nuclei Template

View the template here CVE-2018-10818.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-10818.yaml

References: