Published: 12/12/2017 Updated: 28/05/2019

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

An issue exists on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used to place a file anywhere on the device's file system. This allows an attacker the ability to upload a PHP shell onto the device and obtain arbitrary code execution as root.

Vulnerable Product	Search on Vulmon	Subscribe to Product
westerndigital my_cloud_pr4100_firmware 2.30.172

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class MetasploitModule < Msf::Exploit::Remote Rank = ExcellentRanking HttpFingerprint = { :method => 'HEAD', :uri => '/web/', :pattern => [/Apache/] } include Msf::Exploit::Remote::HttpClient ...

CWE-287 https://github.com/rapid7/metasploit-framework/pull/9248 https://download.exploitee.rs/file/generic/Exploiteers-DEFCON25.pdf https://www.exploit-db.com/exploits/43356/https://nvd.nist.gov https://www.exploit-db.com/exploits/43356/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-17560

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect