WD My Cloud Multiple Vulnerabilities
RISK: High Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities have been identified in WD My Cloud, a remote attacker cloud exploit these vulnerabilities to perform cross-site scripting, remote code exectuion, trigger denial of service condition and get sensitive information from the targeted system.
Impact
- Cross-Site Scripting
- Denial of Service
- Remote Code Execution
- Information Disclosure
System / Technologies affected
- My Cloud EX2
- My Cloud EX4
- My Cloud EX2100
- My Cloud EX4100
- My Cloud EX2 Ultra
- My Cloud DL2100
- My Cloud DL4100
- My Cloud PR2100
- My Cloud PR4100
- My Cloud Mirror
- My Cloud Mirror Gen 2
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
The vendor has issues a fix( v2.30.172)
please refer to this link for detail:
https://blog.westerndigital.com/western-digital-cloud-update/
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with