western digital my cloud firmware vulnerabilities and exploits

(subscribe to this query)

A buffer overflow vulnerability exists on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi devices. An attacker would require exploitation of another vulnerability to raise ...

Westerndigital My Cloud Home Duo Firmware Westerndigital Sandisk Ibi Firmware Westerndigital My Cloud Home Firmware

Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

Westerndigital My Cloud Os

Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware uploads and installation.

Westerndigital My Cloud Os

A command injection vulnerability in the DDNS service configuration of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to execute code in the context of the root user.

Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Mirror G2 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Ex2100 Firmware

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions before 5.26.119 allows an malicious user to read and write arbitrary files. This could lead to a full NAS compromise and would give remote execution capabilities to the attacker.

Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Mirror G2 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Ex2100 Firmware

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification logic in one of functions in libscheddl.so, and download_mgr.cgi makes it possible t...

Western Digital My Cloud Ex2 Ultra Firmware 2.31.183

Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow.

Western Digital My Cloud Ex2 Ultra Firmware 2.31.195

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters.

Western Digital My Cloud Ex2 Ultra Firmware 2.31.195

Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfile_mgr.cgi file allows arbitra...

Westerndigital My Cloud Firmware Westerndigital My Cloud Mirror Gen2 Firmware Westerndigital My Cloud Ex2 Ultra Firmware Westerndigital My Cloud Ex2100 Firmware Westerndigital My Cloud Ex4100 Firmware Westerndigital My Cloud Dl2100 Firmware Westerndigital My Cloud Dl4100 Firmware Westerndigital My Cloud Pr2100 Firmware Westerndigital My Cloud Pr4100 Firmware

1 Github repository

Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR2100 and My Cloud PR4100 firmware prior to 2.31.174 is affected by an unauthenticated file upload vulnerability. The page web/jquery/...

Western Digital My Cloud Mirror Gen 2 Firmware Western Digital My Cloud Ex2 Ultra Firmware Western Digital My Cloud Ex2100 Firmware Western Digital My Cloud Ex4100 Western Digital My Cloud Dl2100 Western Digital My Cloud Dl4100 Firmware Western Digital My Cloud Pr2100 Firmware Western Digital My Cloud Pr4100 Western Digital My Cloud Firmware

1 Github repository

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook