CVE-2018-6546

CRITICAL

plays.tv < 1.27.7.0 - Unauthenticated Remote Code Execution via execute_installer Parameter

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2018-6546. PoCs published by Securifera, securifera.

AI-analyzed exploit summary This exploit targets a vulnerability in the Raptr, Inc Plays TV Service on Windows, allowing arbitrary file execution with SYSTEM privileges. It leverages an exposed HTTP endpoint to execute commands via a crafted request with a hardcoded secret key.

Description

plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined (local or SMB) path as SYSTEM when the execute_installer parameter is used in an HTTP message. This occurs without properly authenticating the user.

Exploits (2)

exploitdb WORKING POC

by Securifera · pythonlocalwindows

https://www.exploit-db.com/exploits/44476

View Code ZIP pw:eip

This exploit targets a vulnerability in the Raptr, Inc Plays TV Service on Windows, allowing arbitrary file execution with SYSTEM privileges. It leverages an exposed HTTP endpoint to execute commands via a crafted request with a hardcoded secret key.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: Raptr, Inc Plays TV Service (CVE-2018-6546)

No auth needed

Prerequisites: Target must have Raptr, Inc Plays TV Service installed and running · Service must be accessible on the specified port

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

nomisec WORKING POC 41 stars

by securifera · poc

https://github.com/securifera/CVE-2018-6546-Exploit

View Code ZIP pw:eip

This is a functional PoC exploit for CVE-2018-6546, targeting the Plays.tv service (plays_service.exe) version 1.27.5.0 and prior. It leverages an arbitrary file execution vulnerability by sending a crafted request to the service's ephemeral port, allowing local or remote code execution with SYSTEM privileges.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Plays.tv service (plays_service.exe) version 1.27.5.0 and prior

No auth needed

Prerequisites: Target must have Plays.tv service installed and running · Attacker must know the ephemeral port or use the default (50452) · Network access to the target service

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →